Eggstravaganza

Summary

The mintEgg() function in EggstravaganzaNFT depends on OpenZeppelin's internal _update() logic (via _mint()) to prevent duplicate tokenIds. While this is technically secure, it lacks explicit validation and emits an ambiguous revert reason, which reduces clarity and auditability.

Vulnerability Details

The function is implemented as follows:

This relies on _mint() from the ERC721 base contract to handle uniqueness.
While functionally correct, this logic:

• Obscures the intent behind the revert

• Makes the root cause less obvious to developers or integrators

• Can lead to confusion when reading transaction failure reasons

Impact

• Makes debugging and code auditing harder

• Poor developer experience and user feedback in case of mint collisions

Tools Used

• Manual Code Review

Recommendations

Add an explicit validation at the top of mintEgg().