Closed sherlock-admin3 closed 4 months ago
Escalate
It is dup of https://github.com/sherlock-audit/2024-04-titles-judging/issues/280
Escalate
It is dup of https://github.com/sherlock-audit/2024-04-titles-judging/issues/280
You've created a valid escalation!
To remove the escalation from consideration: Delete your comment.
You may delete or edit your escalation comment anytime before the 48-hour escalation window closes. After that, the escalation becomes final.
I believe this report is insufficient to be a duplicate of #280 . Poor quality and doesn't explain that the msg.value
is spent in the first iteration and then in the second it reverts. Hence, planning to reject the escalation and leave the issue as it is.
Result: Invalid Unique
Yu3H0
high
The mintBatch function spends only one share of the money to get multiple mint
Summary
The mintBatch function spends only one share of the money to get multiple mint
Vulnerability Detail
in mintBatch function, attacker can only use one share of the money, but can give every receiver amount of mint.
it will cause the vaule drop, and make funds loss.
Impact
funds loss
Code Snippet
https://github.com/sherlock-audit/2024-04-titles/blob/main/wallflower-contract-v2/src/editions/Edition.sol#L304
Tool used
Manual Review
Recommendation
for every receiver, spend one share of money