Location: SantasList.sol:154-161
Description: s_theListCheckedOnce[msg.sender] and s_theListCheckedTwice[msg.sender] are each read twice — once for the NICE branch check and again for the EXTRA_NICE branch check. Each warm SLOAD costs 100 gas after the first access.
Impact: ~200 extra gas wasted per collectPresent() call.
Recommendation:
Severity: Gas
Location: SantasList.sol:187
Description: tokenURI() is declared public pure but is never called internally within the contract. public functions generate additional bytecode to handle both internal and external call paths. Since this function is only ever called externally, declaring it public wastes deployment gas unnecessarily.
Impact: Minor unnecessary bytecode and marginal deployment gas overhead.
Recommendation:
Severity: Gas
Location: SantasList.sol:181
Description: s_tokenCounter is a uint256 that increments by 1 on each mint. Overflowing a uint256 would require 2^256 mints — an impossibility in practice. The Solidity 0.8+ default overflow check on s_tokenCounter++ wastes ~20 gas per mint with no safety benefit.
Impact: ~20 gas wasted on every NFT mint.
Recommendation:
The contest is live. Earn rewards by submitting a finding.
Submissions are being reviewed by our AI judge. Results will be available in a few minutes.
View all submissionsThe contest is complete and the rewards are being distributed.