Code423n4 #11, Can access cards of other markets

RealityCards · Jun 21, 2021 · 1f395f8 · 1f395f8
1 parent 9655789
commit 1f395f8
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/contracts/RCMarket.sol b/contracts/RCMarket.sol
@@ -335,6 +335,7 @@ contract RCMarket is Initializable, NativeMetaTransaction, IRCMarket {
 
     /// @notice gets the owner of the NFT via their Card Id
     function ownerOf(uint256 _cardId) public view override returns (address) {
+        require(_cardId < numberOfCards, "Card does not exist");
         uint256 _tokenId = _cardId + totalNftMintCount;
         return nfthub.ownerOf(_tokenId);
     }