Submission Details
Severity:
Lack of Access Control in mint Function
Summary:The mint function in the ERC20ToGenerateNftFraccion contract is public, allowing unauthorized minting of tokens.
Vulnerability Details:
function mint(address _to, uint256 _amount) public {
_mint(_to, _amount);
}
Impact:Unauthorized users can mint tokens, compromising the token’s integrity.
Tools Used:manual code review
Recommendations:Use OpenZeppelin’s Ownable or a custom access control system to restrict minting permissions
Updates
Lead Judging Commences
fishy 5 months ago
Submission Judgement Published Assigned finding tags:
Lack of token access control chekcs
Any person can mint the ERC20 token generated in representation of the NFT
Rewards breakdown
nSLOC
181This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.