Submission Details
Severity:
Race Condition on NFT Transfer
Summary
An NFT transfer and short record update are not atomic.
Vulnerability Details
When transferring an NFT short position in LibShortRecord.transferNFT, the short record is updated before the NFT transfer.
This creates a race condition where a reentrancy call could split them.
Impact
Short record and NFT ownership could become out of sync.
Tools Used
Manual
Recommendations
Use a mutex lock to ensure atomicity:
mutex.lock();
updateShortRecord(id);
transferNFT(tokenId);
mutex.unlock();
Prize pool breakdown
Total prize
55,000 USDC
nSLOC
3,36516 USDC / LOC
50,000 USDC
5,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.