The contract inherits from Ownable but does not use it effectively to enforce any access control.
Ownable provides useful access control mechanisms, but:
No onlyOwner modifiers are applied.
Ownership functions are unused.
This represents unnecessary code bloat and potential confusion.
no POC
Missed security opportunities.
Dead code increases bytecode size.
LOW
LOW
Use onlyOwner for minting (strongly recommended).
Or remove Ownable inheritance entirely if not needed.
The mint function of the Snowman contract is unprotected. Hence, anyone can call it and mint NFTs without necessarily partaking in the airdrop.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.