Submission Details
Severity:
Predictable Token ID Generation of `_nextTokenId` in `SoulboundProfileNFT::mintProfile()` function
Description: Incremental token ID generation allows potential front-running
Impact: Predictability in token minting sequence
Proof of Concept:
contract TokenIdFrontrunning {
function frontrunMinting() external {
// Predict next token ID and front-run minting
uint256 predictedTokenId = currentTokenId + 1;
// Rapid consecutive minting to manipulate sequence
soulboundNFT.mintProfile("Attacker1", 25, "uri1");
soulboundNFT.mintProfile("Attacker2", 25, "uri2");
}
}
Recommended Mitigation:
Use randomized token ID generation
Implement commit-reveal scheme
Updates
Appeal created
n0kto 6 months ago
Submission Judgement Published Reason: Non-acceptable severity
Assigned finding tags:
Informational or Gas
Please read the CodeHawks documentation to know which submissions are valid. If you disagree, provide a coded PoC and explain the real likelyhood and the detailed impact on the mainnet without any supposition (if, it could, etc) to prove your point.
Rewards breakdown
nSLOC
197This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.