The `_nextTokenId` variable in the `UpliftOnlyExample` contract is not used anywhere in the project.
Summary
The _nextTokenId variable in the UpliftOnlyExample contract appears to be unused throughout the project.
Vulnerability Details
As the name suggests, the _nextTokenId variable is intended to store the ID of the next NFT to be minted in the UpliftOnlyExample contract. However, it is neither assigned a value nor utilized to store the intended data.
Impact
As a result, the contract will lose track of the NFT count, fail to monitor the minted NFTs, or potentially mint NFTs with incorrect token IDs in the UpliftOnlyExample contract.
Tools Used
Manual Review
Recommendations
To ensure the proper functioning of the contract and the project, the
_nextTokenIdvariable should be utilized in the appropriate locations to accurately track and manage the minting process.If redundant remove them from the contract to save gas and misinformations.
Lead Judging Commences
Informational or Gas / Admin is trusted / Pool creation is trusted / User mistake / Suppositions
Please read the CodeHawks documentation to know which submissions are valid. If you disagree, provide a coded PoC and explain the real likelyhood and the detailed impact on the mainnet without any supposition (if, it could, etc) to prove your point.
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.