Inefficient String Manipulation in SoulboundProfileNFT.tokenURI
Root Cause: The tokenURI function constructs the JSON metadata string using string concatenation with abi.encodePacked. While this works, it can be gas-intensive, especially as the metadata grows larger.
Impact: High gas costs for retrieving token metadata.
Recommendation: Consider using a more gas-efficient method for constructing JSON strings, such as a dedicated library for JSON generation or storing the metadata off-chain (IPFS) and referencing it in the tokenURI.
Appeal created
Informational or Gas
Please read the CodeHawks documentation to know which submissions are valid. If you disagree, provide a coded PoC and explain the real likelyhood and the detailed impact on the mainnet without any supposition (if, it could, etc) to prove your point.
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.