Submission Details
Severity:
Vulnerability in `buyOrder` Function: Potential ERC20 Token Burning Issue
Summary
In src/TokenDivider.sol, users can purchase a portion of an NFT through the buyOrder function. However, since the ERC20 token is burnable, a user could call the burn function on their tokens. This would prevent other users holding the remaining portions of the NFT from ever being able to claim the NFT.
Recommendations
It is recommended to add constraints to the burn function to prevent this issue.
Rewards breakdown
nSLOC
181This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.