highLogic errorEVM-Solidity
AI Arena: Since you can reroll with a different fighterType than the NFT you own, you can reroll bypassing maxRerollsAllowed and reroll attributes based on a different fighterType
- Payout
- $0
- Protocol
- AI Arena
- Disclosed
- May 14, 2024
- Source
- code4rena
The AI Arena FighterFarm contract contains a critical input validation vulnerability in the reRoll function. The function allows users to specify an arbitrary fighterType, which is then used to determine reroll limits and to influence the generation of new fig …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-02-ai-arena-findings/issues/306
- https://github.com/code-423n4/2024-02-ai-arena-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.