Project

One World
NFTDeFi
15,000 USDC
View results
Submission Details
Severity: high
Invalid

H-1: Users can pay a minimal cost to obtain the highest level NFT, avoiding the need to pay a significantly higher price later to acquire a high-level NFT.

Summary

  1. We can understand the relationship between the Tiers based on the content previously described by the Sponsor. The specific relationships are shown in the image below.

  2. In a SPONSORED DAO, the tiers.price settings for Tier 1 through Tier 7 are as follows:
    Tier 1: 1581.25, Tier 2: 790.63, Tier 3: 425.16, Tier 4: 209.21, Tier 5: 104.6, Tier 6: 69.76, Tier 7: 34.88.

  3. Therefore, when users purchase a specific tier membership NFT via joinDAO to join the DAO, they can opt to run JoinDAO in advance and pay a minimal cost to acquire a higher-tier NFT. The details will be demonstrated in the POC!

图片

Impact

Users can pay a minimal cost to obtain the highest level NFT, avoiding the need to pay a significantly higher price later to acquire a high-level NFT. The POC is as follows:

2 Tier 7 = 1 Tier 6
2 Tier 6 = 1 Tier 5
2 Tier 5 = 1 Tier 4
2 Tier 4 = 1 Tier 3
2 Tier 3 = 1 Tier 2
2 Tier 2 = 1 Tier 1
  1. In the upgradeTier function, since two of the same level Tiers can be upgraded to the next higher Tier, it takes a total of 64 Tier 7s to upgrade from Tier 7 to Tier 1. Note: The function only allows for step-by-step upgrading, meaning Tier 7 can upgrade to Tier 6, but cannot directly upgrade from Tier 7 to Tier 5.

  2. As shown in the image in the Summary, Tier 7 costs 34.88. To upgrade from Tier 7 to Tier 1, a total of 64 Tier 7s are required, which will cost 34.88 * 64 = 2,232.32. This is 651.07 more than directly purchasing Tier 7.

  3. Therefore, users have several options: besides directly purchasing Tier 1 for 1581.25 or buying 2 Tier 2s for 1,581.26 to upgrade to Tier 1, they can also directly purchase 16 Tier 5s for a total of 1,673.6 to upgrade to Tier 1, or purchase 8 Tier 4s for a total of 1,673.68 to upgrade to Tier 1.

  4. Compared to the above options, if Tier 1 and Tier 2 are sold out, purchasing 16 Tier 5s is cheaper than upgrading from 64 Tier 7s to Tier 1. The total savings would be 2,232.32 - 1,673.6 = 558.72.


Recommendations

In both createNewDAOMembership and updateDAOMembership, it is necessary to strictly ensure that the price of a higher-tier level matches that of the tier directly below it. For example, the following settings:

Tier 1 -> $64
Tier 2 -> $32
Tier 3 -> $16
Tier 4 -> $8
Tier 5 -> $4
Tier 6 -> $2
Tier 7 -> $1
Updates

Lead Judging Commences

0xbrivan2 Lead Judge about 1 year ago
Submission Judgement Published
Invalidated
Reason: Known issue

Appeal created

0x996 Submitter
about 1 year ago
0xbrivan2 Lead Judge
about 1 year ago
0xbrivan2 Lead Judge about 1 year ago
Submission Judgement Published
Invalidated
Reason: Known issue

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.

Give us feedback!