Submission Details
Severity: medium
ValidReentrancy in mintProfile() allows bypassing one-profile-per-address restriction through _safeMint callback in SoulboundProfileNFT.sol
Updates
Appeal created
Submission Judgement Published
Validated
Assigned finding tags:
finding_mintProfile_reentrancy
Likelihood: High, anyone can do it. Impact: Low, several profile will be minted, which is not allowed by the protocol, but only the last one will be stored in profileToToken and won't affect `likeUser` or `matchRewards`.
Rewards breakdown
nSLOC
197This contest has a flat reward structure with the following payouts:
High
100 EXP
Medium
20 EXP
Low
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.