https://sherlock-files.ams3.digitaloceanspaces.com/twitter_images/09b85a00-4cc2-4730-b982-23e258fb1d18.png

soliditywala

Security Researcher

Contact Me

High

5

Total

Medium

2

Total

$3.00

Total Earnings

#2440 All Time

1x

Payouts

All

Code4rena

Feb '24

AI Arena

AI Arena

3.88 USDC • 7 total findings • Code4rena • soliditywala

#141

high

A locked fighter can be transferred; leads to game server unable to commit transactions, and unstoppable fighters

high

Since you can reroll with a different fighterType than the NFT you own, you can reroll bypassing maxRerollsAllowed and reroll attributes based on a different fighterType

high

Players have complete freedom to customize the fighter NFT when calling `redeemMintPass` and can redeem fighters of types Dendroid and with rare attributes

high

Fighters cannot be minted after the initial generation due to uninitialized `numElements` mapping

high

Non-transferable `GameItems` can be transferred with `GameItems::safeBatchTransferFrom(...)`

medium

Can mint NFT with the desired attributes by reverting transaction

medium

DoS in `MergingPool::claimRewards` function and potential DoS in `RankedBattle::claimNRN` function if called after a significant amount of rounds passed.