SeanChao

TLDRIn the contract, Eva can reuse a valid signature of Alice’s because the verification doesn’t involve the transaction sender’s address, nonce or anything particular to a user and a transaction.Contract AnalysisMintThe whitelist users are supposed to call the mint_approved function to mint the NFT.This function accepts three parameters:info, a struct contains an address from and the signature to verify. struct vData { bool mint_free; uint256 max_mint; address from; uint256 start; uint256 en...