Skip to content
OpenAdvisories

Package · crates.io

mpl-candy-machine

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    GHSA-9v25-r5q2-2p6w

    Candy Machine Set Collection During Mint Missing Check

    A problem with Candy Machine V2 allow minting NFTs to an arbitrary collection due to a missing check. Here is a description of the exploit: Details: Here is the tx/ix to exploit: Transaction: Ix 1: candy_machine v2, mint_nft, passing in empty metadata -1 Ix 2…

    mpl-candy-machine crates.io