The setBaseURI function allows privileged accounts (those with the DEFAULT_ADMIN_ROLE) to update the baseURI used for NFT metadata. However, the original implementation did not emit an event upon changing the baseURI, which can hinder tracking and auditing of metadata updates.
The baseURI serves as the common URI for all tokens. If it is updated without proper tracking, any frontend applications still using the old URI may break or show outdated metadata.
The lack of an event emission prevents transparent auditing and tracking of changes, making it difficult for external systems to stay in sync with the updated baseURI.
A failure to properly log changes could lead to issues in compliance, monitoring, or debugging, particularly in the case of large-scale projects where metadata updates are frequent.
Implement an event emission within the setBaseURI function to log changes to the baseURI. This enhances transparency and facilitates better interaction with off-chain systems.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.