Snowman Merkle Airdrop
AI First Flight #10
Beginner FriendlyFoundrySolidityNFT
EXP
View results
Submission Details
Impact: medium
Likelihood: medium
Invalid

Missing access control

nemeethan

Missing access control + leakage of sensitive minting in private drops

Description

  • Missing access control: anyone can call it which is usually fine for public counters but could leak sensitive minting progress in Private drops,add onlyonwer modifier if needed.

Missing access control
​
@>function getTokenCounter() external view returns (uint256) {
return s_TokenCounter;

Risk

Likelihood:

  • Often but possible occurrence

Impact:

  • It could leak sensitive minting progress in private drops.

  • It affects the functionality of the protocol negatively.

Proof of Concept

​

Recommended Mitigation

Declare snowman.sol :: s_TokenCounter as public instead,Solidity auto-generates this exact getter


Updates

Lead Judging Commences

ai-first-flight-judge Lead Judge about 3 hours ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.

Give us feedback!