Submission Details
Severity:
Inconsistent State Updates in "upgradeTier::MembershipFactory" contract
Description when a user calls the upgradeTier function, his current tier token is burnt and he is minted the token of the upgraded tier. But the state values of the tiers of the DaoConfig of that particular NftmembershipAddress is not updated. This means that despite the burning of a token from a particular tier, its minted field in the TierConfig remains unchanged. And similarly the minted field of the upgraded TierConfig also remains unchanged.
Impact
Over time, this leads to inflated minted counts
DAO membership tracking becomes unreliable
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
54128 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.