Submission Details
Impact:
Likelihood:
## [I-1] Invalid JSON Generated in `tokenURI()`
Root + Impact
Description
The tokenURI() function generates invalid JSON because the rareName value is not wrapped in quotes:
'"attributes": [{"trait_type": "rarity", "value": ',
@> rareName, // Inserted without quotes
'}], "image":"',
Risk
Likelihood:
This produces invalid JSON like:
{"attributes": [{"trait_type": "rarity", "value": common}]}
Instead of valid JSON:
{"attributes": [{"trait_type": "rarity", "value": "common"}]}
Proof of Concept
Recommended Mitigation
'"attributes": [{"trait_type": "rarity", "value": ',
- rareName,
+ '"', rareName, '"',
'}], "image":"',
Rewards breakdown
This contest has a flat reward structure with the following payouts:
Live
The contest is live. Earn rewards by submitting a finding.
Judging
Submissions are being reviewed by our AI judge. Results will be available in a few minutes.
View all submissionsRewards Distribution
The contest is complete and the rewards are being distributed.