Submission Details
Severity:
Locked-up Ether
Description: requestMintWeatherNFT collects msg.value == s_currentMintPrice on every call, but the contract provides no way to withdraw accumulated ETH.
Impact: All ETH paid by minters is locked in the contract. The owner cannot collect revenue or refund users in case of a problem.
Recommended Mitigation: Add a withdrawal function:
function withdraw() external onlyOwner {
payable(msg.sender).transfer(address(this).balance);
}
Updates
Appeal created
bube 4 months ago
Submission Judgement Published Assigned finding tags:
Lack of `withdraw` function
The contract collects funds for minting a WeatherNFT, but there is no function that allows the owner to withdraw these funds.
Rewards breakdown
nSLOC
236This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.