Submission Details
Severity:
Missing access control on IndexToken mint
Summary
Everyone can mint any amount of IndexToken.
Vulnerability Details
Method mint (link) of IndexToken contract has no access control, so attacker can mint up to type(unit259).max value and NFTLiquidator::liquidateNFT method will throw overflow error on IndexToken's minting (link) because IndexToken._totalSupply reached max value.
Impact
DOS of the NFTLiquidator
Tools Used
Manual code review
Recommendations
Add access control to the IndexToken::mint method.
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420
USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.