Snowman Merkle Airdrop

First Flight #42
Beginner FriendlyFoundrySolidityNFT
100 EXP
View results
Submission Details
Severity: high
Valid

Unused Ownable Inheritance

Summary

The contract inherits from Ownable but does not use it effectively to enforce any access control.

Description

Ownable provides useful access control mechanisms, but:
No onlyOwner modifiers are applied.
Ownership functions are unused.

This represents unnecessary code bloat and potential confusion.

POC

no POC

Impact

Missed security opportunities.

Dead code increases bytecode size.

Severity

LOW

Likelihood

LOW

Recommendation

Use onlyOwner for minting (strongly recommended).
Or remove Ownable inheritance entirely if not needed.

Updates

Lead Judging Commences

yeahchibyke Lead Judge 5 months ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement

Appeal created

0xsamuraijack Submitter
5 months ago
yeahchibyke Lead Judge
5 months ago
yeahchibyke Lead Judge 5 months ago
Submission Judgement Published
Validated
Assigned finding tags:

Unrestricted NFT mint function

The mint function of the Snowman contract is unprotected. Hence, anyone can call it and mint NFTs without necessarily partaking in the airdrop.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.