Submission Details
Severity:
User Age Cannot Be Updated
Summary
In the SoulboundProfileNFT, the age field in the Profile struct is stored permanently and cannot be updated.
Vulnerability Details
Once a profile is minted, the age field is immutable. This limits the contract's ability to reflect changes in user data over time when they grow older.
Impact
Inability to update user profiles.
Reduced usability of the protocol.
Tools Used
Manual code review.
Recommendations
Add a function to update the age field:
function updateAge(uint8 newAge) external {
uint256 tokenId = profileToToken[msg.sender];
require(tokenId != 0, "No profile found");
_profiles[tokenId].age = newAge;
}
Rewards breakdown
nSLOC
197This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.