DatingDapp

First Flight #33
Beginner FriendlyFoundrySolidityNFT
100 EXP
View results
Submission Details
Severity: high
Invalid

Dapp doesn't lets users mint a soulbound NFT as claimed in the ReadMe.md.

Summary

The Dating Dapp Protocol states that: "Dating Dapp lets users mint a soulbound NFT as their verified dating profile".
However, it doesn't impliment it completely, as the function SoulboundProfileNFT::mintProfile() isn't ever called.
Also, the way that function is written, is missing Access control as anbybody can mint if its implemented.

Vulnerability Details

SoulboundProfileNFT::mintProfile()is coded but never called in the logic. In addition, it is missing access control so if its called/implimented, anyone can call it.

Impact

Users aren't able to mint a soulbound NFT as claimed by the protocol.

Tools Used

Manual review.

Recommendations

in the LikeRegistry contract's constructor , invoke SoulboundProfileNFT::mintProfile()so users can verify their profile by minting the NFT token. Then add access control to the funciton itself.

Updates

Appeal created

n0kto Lead Judge 10 months ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.

Give us feedback!