Submission Details
Severity:
Access control of mint
Summary
The mint function is public, meaning anyone can call it to create tokens.
Vulnerability Details
The mint function is public, meaning anyone can call it to create tokens. Typically, this function should be restricted to a specific role (e.g., onlyOwner) to prevent abuse.
Impact
Anybody can abuse the code.
Tools Used
Foundry
Recommendations
The function mint can called by onlyOwner
Updates
Lead Judging Commences
fishy 5 months ago
Submission Judgement Published Assigned finding tags:
Lack of token access control chekcs
Any person can mint the ERC20 token generated in representation of the NFT
Rewards breakdown
nSLOC
181This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.