Description: The mint()
function in WinningToken.sol is only protected by the onlyOwner
modifier, but there's no mechanism to prevent the owner from minting unlimited tokens to themselves or others.
Impact: The owner could mint an unlimited number of tokens, potentially devaluing the token and disrupting the game's economy.
Proof of Concept:
Recommended Mitigation: Implement a maximum supply cap or restrict minting to specific conditions (e.g., only when a game is won).Implement a maximum supply cap or restrict minting to specific conditions (e.g., only when a game is won).
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.