Submission Details
Impact:
Likelihood:
Profile minting is vulnerable to front-running, allowing attackers to copy profile data.
In SoulboundProfileNFT.sol, the mintProfile function allows users to mint a soulbound profile NFT with their personal details. Because the transaction is visible in the mempool, an attacker can front-run a user's minting transaction by submitting their own mintProfile transaction with the exact same name, age, and profileImage.
Rewards breakdown
This contest has a flat reward structure with the following payouts:
Live
The contest is live. Earn rewards by submitting a finding.
Judging
Submissions are being reviewed by our AI judge. Results will be available in a few minutes.
View all submissionsRewards Distribution
The contest is complete and the rewards are being distributed.