DatingDapp

First Flight #33
Beginner FriendlyFoundrySolidityNFT
100 EXP
View results
Submission Details
Severity: high
Invalid

Dapp doesn't lets users mint a soulbound NFT as claimed in the ReadMe.md.

Summary

The Dating Dapp Protocol states that: "Dating Dapp lets users mint a soulbound NFT as their verified dating profile".
However, it doesn't impliment it completely, as the function SoulboundProfileNFT::mintProfile() isn't ever called.
Also, the way that function is written, is missing Access control as anbybody can mint if its implemented.

Vulnerability Details

SoulboundProfileNFT::mintProfile()is coded but never called in the logic. In addition, it is missing access control so if its called/implimented, anyone can call it.

Impact

Users aren't able to mint a soulbound NFT as claimed by the protocol.

Tools Used

Manual review.

Recommendations

in the LikeRegistry contract's constructor , invoke SoulboundProfileNFT::mintProfile()so users can verify their profile by minting the NFT token. Then add access control to the funciton itself.

Updates

Appeal created

n0kto Lead Judge 6 months ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.