Submission Details
Severity:
Public `mint` Function Lacks Access Control, Allowing Unauthorized ERC20 Minting
Summary
In src/token/ERC20ToGenerateNftFraccion.sol, the mint function is public, meaning anyone can mint the ERC20 token corresponding to the NFT. However, since there are additional records in the contract, self-minting tokens bypasses these records, leaving them untracked.
Recommendations
It is recommended to implement access control to prevent unauthorized token minting.
Updates
Lead Judging Commences
fishy 5 months ago
Submission Judgement Published Assigned finding tags:
Lack of token access control chekcs
Any person can mint the ERC20 token generated in representation of the NFT
Rewards breakdown
nSLOC
181This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.