Project
One World
NFTDeFi
15,000 USDC
View results
Previous Next
Submission Details
Severity: low
Invalid

Incorrect message in the `updateTier()` function

bajagasec

Summary

Incorrect message in the updateTier() function

Vulnerability Details

The following require statement in the updateTier() function includes an incorrect message:

require(daos[daoMembershipAddress].noOfTiers >= fromTierIndex + 1, "No higher tier available.");

From the documentation and previous audit we know:

  • Tier 0 (Tier 1 in website) is at the highest level.

  • Tier 6 (Tier 7 in website) is lowest.

The message "No higher tier available." is misleading, as Tier 0 is the highest tier rather than Tier 6.

Impact

When a user attempts to upgrade from a fromTierIndex greater than 6, they will receive an incorrect error message.

Tools Used

  • Manual Review

  • VsCode

Recommendations

Update the error message to "Invalid tier index." to better reflect the actual issue.

Updates

Lead Judging Commences

0xbrivan2 Lead Judge 7 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity
0xbrivan2 Lead Judge 7 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.