Getting started

This audit examines the SlabMachine contract, a gacha-style NFT machine that allows users to pull random Slab NFTs using USDC payments.

The contract uses Chainlink VRF for randomness and implements a buyback mechanism. The audit identifies several critical vulnerabilities, medium-severity issues, and optimization opportunities.