No fallback function on the SoulboundProfileNFT smart contract.
Summary
No fallback function on the SoulboundProfileNFT contract.
Vulnerability Details
There is no receive() or payable fallback function, so any direct ETH transfer will be lost
Impact
ETH would become part of the contract’s balance and there’s no withdrawal mechanism.
Tools Used
Manual review
Recommendations
Add a non-payable fallback explicitly or even include a function for the owner to withdraw any accidental ETH.
Appeal created
Informational or Gas
Please read the CodeHawks documentation to know which submissions are valid. If you disagree, provide a coded PoC and explain the real likelyhood and the detailed impact on the mainnet without any supposition (if, it could, etc) to prove your point.
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.