Submission Details
Severity:
Lack of access control in contract ERC20ToGenerateNftFraccion
Summary
The ERC20ToGenerateNftFraccion lack access control making it valuable to malicious users calling the contract to mint new tokens
Vulnerability Details
contract ERC20ToGenerateNftFraccion is ERC20, ERC20Burnable {
constructor(string memory _name, string memory _symbol) ERC20(_name, _symbol) {
}
function mint(address _to, uint256 _amount) public {
_mint(_to, _amount);
}
}
Impact
Unapproved token creation
Tools Used
Manuel review
Recommendations
User access control to ensure only the tokenDivier contract can mint new tokens
Updates
Lead Judging Commences
juan_pedro_ventu 4 months ago
Submission Judgement Published Assigned finding tags:
Lack of token access control chekcs
Any person can mint the ERC20 token generated in representation of the NFT
Rewards breakdown
nSLOC
181This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.