Submission Details
Impact:
Likelihood:
Low Findings
1. Redundant tokenIdToEdition Mapping
Description: tokenIdToEdition duplicates decodeTokenId() data.
Impact: Wasted gas, storage bloat.
Recommendation: Remove mapping and use decodeTokenId() instead.
2. Hardcoded Pass URI
Description: Cannot update pass metadata post-deployment.
Recommendation:
string private _basePassURI;
function setBasePassURI(string memory uri) external onlyOwner {
_basePassURI = uri;
}
3. Missing Withdraw Event
Description: No event emitted on ETH withdrawals.
Impact: Poor auditability.
Recommendation:
event FundsWithdrawn(address indexed receiver, uint256 amount);
function withdraw(address target) external onlyOwner {
uint256 amount = address(this).balance;
payable(target).transfer(amount);
emit FundsWithdrawn(target, amount);
}
Updates
Lead Judging Commences
inallhonesty about 2 months ago
Submission Judgement Published Reason: Non-acceptable severity
Assigned finding tags:
Missing events / Events not properly configured
Informational. This protocol doesn't rely on events to function, they are just nice to have, but not mandatory.
Rewards breakdown
nSLOC
234This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.