Project
One World
NFTDeFi
15,000 USDC
View results
Previous Next
Submission Details
Severity: low
Invalid

Incorrect message in the `updateTier()` function

bajagasec

Summary

Incorrect message in the updateTier() function

Vulnerability Details

The following require statement in the updateTier() function includes an incorrect message:

require(daos[daoMembershipAddress].noOfTiers >= fromTierIndex + 1, "No higher tier available.");

From the documentation and previous audit we know:

  • Tier 0 (Tier 1 in website) is at the highest level.

  • Tier 6 (Tier 7 in website) is lowest.

The message "No higher tier available." is misleading, as Tier 0 is the highest tier rather than Tier 6.

Impact

When a user attempts to upgrade from a fromTierIndex greater than 6, they will receive an incorrect error message.

Tools Used

  • Manual Review

  • VsCode

Recommendations

Update the error message to "Invalid tier index." to better reflect the actual issue.

Updates

Lead Judging Commences

0xbrivan2 Lead Judge 12 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity
0xbrivan2 Lead Judge 12 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.