Submission Details
Severity:
Owner could not receive nft with liquidity back from contract
Summary
Contract L2TokenReceiver can receive nft (from owner) but owner could not extract it back,
Vulnerability Details
As we can see, contract L2TokenReceiver contract could accept nft
function onERC721Received(address, address, uint256, bytes calldata) external pure returns (bytes4) {
return this.onERC721Received.selector;
}
And sponsor Ruslan said, that they will send nft with token liquidity to contract.
But owner could not (if will want) get this nft back.
Impact
Contract always will keep nft with token's liquidity and owner could not extract it
Tools Used
Manual review
Recommendations
Add function withdraw with modifier onlyOwner, which allow owner receive nft with liquidity
Updates
Lead Judging Commences
inallhonesty
over 1 year ago
sovaslava
over 1 year ago
inallhonesty
over 1 year ago
Prize pool breakdown
Total prize
22,500 USDC
nSLOC
1,05421 USDC / LOC
20,000 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.