Submission Details
Severity:
Missing Input Validation in EggstravaganzaNFT Constructor
Summary
The EggstravaganzaNFT contract's constructor lacks input validation for _name and _symbol parameters, allowing empty strings to be set.
Vulnerability Details
The constructor accepts string parameters without any validation. This could lead to display issues in NFT marketplaces and wallets, affecting user experience and contract integration.
constructor(string memory _name, string memory _symbol)
ERC721(_name, _symbol) Ownable(msg.sender)
{
// no validations
}
Impact
Low as it doesn't affect core contract functionality or security.
Tools Used
Manual code review
Recommendations
Add input validation in the constructor. Example:
require(bytes(_name).length > 0, "Name cannot be empty");
require(bytes(_symbol).length > 0, "Symbol cannot be empty");
Rewards breakdown
nSLOC
129This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.