Core Contracts
Regnum Aurum Acquisition Corp
HardhatReal World AssetsNFT
77,280 USDC
View results
Previous Next
Submission Details
Severity: low
Valid

RAACNFT current baseURI represents tests NFTs

0xalexsr

Summary

The currently set baseURI in RAACNFT represents test NFTs to not be used in production

Vulnerability Details

The current baseURI is set to

string public baseURI = "ipfs://QmZzEbTnUWs5JDzrLKQ9yGk1kvszdnwdMaVw9vNgjCFLo2/";

Using an ipfs gateway, we can see it represents 7 identical NFTs with no attributes where the images are the same

https://ipfs.io/ipfs/QmZzEbTnUWs5JDzrLKQ9yGk1kvszdnwdMaVw9vNgjCFLo2/

Impact

This will cause the first minted NFTs to return bad data when using tokenURIand display same pictures on NFT marketplace making the NFTs to not reflect their real value.

Impact is HIGH as it won't show the real NFT expected data but likelihood can be argued low as it can be solved by using the setBaseUri function

Recommendations

baseURI should start with an empty string or be set to expected NFTs production data

Updates

Lead Judging Commences

inallhonesty Lead Judge 3 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Appeal created

0xalexsr Submitter
3 months ago
inallhonesty Lead Judge
3 months ago
inallhonesty Lead Judge 3 months ago
Submission Judgement Published
Validated
Assigned finding tags:

Metadata not properly configured

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.