Functions like attendPerformance() and redeemMemorabilia() involve reward or mint logic. If implementation lacks nonReentrant, attackers can re-enter during token transfer/mint.
Impact:
Double reward claim
NFT duplication
BEAT token inflation
Mention reentrancy protection requirement in interface (@dev Must be nonReentrant). Enforce using OpenZeppelin's ReentrancyGuard in implementation.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.