The Dating Dapp Protocol states that: "Dating Dapp lets users mint a soulbound NFT as their verified dating profile".
However, it doesn't impliment it completely, as the function SoulboundProfileNFT::mintProfile()
isn't ever called.
Also, the way that function is written, is missing Access control as anbybody can mint if its implemented.
SoulboundProfileNFT::mintProfile()
is coded but never called in the logic. In addition, it is missing access control so if its called/implimented, anyone can call it.
Users aren't able to mint a soulbound NFT as claimed by the protocol.
Manual review.
in the LikeRegistry contract's constructor , invoke SoulboundProfileNFT::mintProfile()
so users can verify their profile by minting the NFT token. Then add access control to the funciton itself.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.