Submission Details
Severity:
Lack of Input Validation in RAACNFT.mint()
Summary
Data inconsistency in NFT tracking
Vulnerability Details
RAACNFT.mint(to) allows to to be address(0), burning NFTs.
Impact
Data inconsistency in NFT tracking
Tools Used
Manual Review
Recommendations
Add
require(to != address(0), "Invalid recipient");
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.