Platform: Code4rena
Start Date: 03/05/2022
Pot Size: $30,000 USDC
Total HM: 6
Participants: 93
Period: 3 days
Judge: gzeon
Id: 118
League: ETH
Rank: 76/93
Findings: 1
Award: $30.28
🌟 Selected for report: 0
🚀 Solo Findings: 0
🌟 Selected for report: defsec
Also found by: 0v3rf10w, 0x1f8b, 0x4non, 0x52, 0xDjango, 0xf15ers, 0xkatana, 0xliumin, AuditsAreUS, BowTiedWardens, CertoraInc, Cr4ckM3, Funen, GimelSec, Hawkeye, IllIllI, Kulk0, M0ndoHEHE, MaratCerby, Picodes, Ruhum, TerrierLover, TrungOre, VAD37, WatchPug, berndartmueller, broccolirob, catchup, cccz, cryptphi, csanuragjain, delfin454000, dirk_y, eccentricexit, ellahi, fatherOfBlocks, gzeon, hake, hansfriese, hickuphh3, horsefacts, hubble, hyh, ilan, joestakey, kebabsec, kenta, kenzo, leastwood, m9800, marximimus, minhquanym, oyc_109, p4st13r4, pauliax, pedroais, peritoflores, plotchy, rajatbeladiya, reassor, rfa, robee, rotcivegaf, samruna, shenwilly, shung, simon135, sorrynotsorry, sseefried, teddav, throttle, tintin, unforgiven, z3s
30.2807 USDC - $30.28
setWarriorsAddress: This should be set only once while initialization and owner should not be allowed to reset it later. If this is not done then on changing warriors address all mints linked to previous warriors address would be lost
forwardERC20s: require(address(msg.sender) != address(0)); not required as msg.sender cannot be 0 address
Events are missing which can be dangerous. All important function should have emitted events say withdrawAll function
setDaStartTime/setMintlistStartTime/setPublicStartTime/setClaimsStartTime: All these should be internal function and call should only be allowed via setPhaseTimes function
setFinalPrice: _newPrice cannot be 0 as users will get free warriors using publicSummon function