Smart Contract Security Analysis Report
Vulnerability: Missing Verification in isVerified Function
Date: 13.11.2024
Severity: Medium
Description:
In the CharityRegistry contract, the isVerified function returns the value of registeredCharities[charity] instead of verifiedCharities[charity]. This could result in unverified charities being treated as verified, potentially allowing donors to send Ether to unverified addresses and receive donation receipt NFTs.
Mitigation:
Ensure the isVerified function checks the correct mapping:
Lead Judging Commences
finding-isVerified-return-registered-charities
Likelyhood: High, the function returns registered charities instead of verified ones. Impact: High, Any charities can be registered by anyone and will be declared as verified by this function bypassing verification.
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.