Beatland Festival
AI First Flight #4
Beginner FriendlyFoundrySolidityNFT
EXP
View results
Submission Details
Impact: high
Likelihood: low
Invalid

Goverance vulnerable

lovegirls09

Reuse pass + drain performance

Description

  • block transfer , approve , transferFrom function for token 1 (General Pass) , 2 (Vip Pass) , 3 (BackStage Pass)

  • every one can buy pass and resend him for drain performance and bypass reuire's

Risk

Likelihood:

  • when hacker found this vulnerabe

  • easy write smart contract with create / create 2 cicle drain with resend pass

Impact:

  • drained many BEAT tokens

  • drain performans BEAT token

  • crash performans

  • user will dont have permormans and his passes will be unwork

  • drain ALL BEAT supply

  • dupe pass

  • hacker can sell pass too


Recommended Mitigation

- func transfer() {...}
+ func transfer() {
require(tokenId != 3 || tokenId != 2 || tokenId != 1)
}
Updates

Lead Judging Commences

ai-first-flight-judge Lead Judge about 1 hour ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.

Give us feedback!