Submission Details
Severity:
The token can be lost due to mint to the NonERC721Receiver.
Summary
The token can be minted to a contract that does not have the functionality to transfer ERC721 tokens and token will be lost.
Vulnerability Details
The contract uses the _mint function to mint tokens for the raffle winner in the fulfillRandomWords function. This function doesn't have _check_on_erc721_received check and tokens may be lost if the receiver is contract and doesn't have methods for transferring ERC721 tokens.
Impact
High
Tools Used
VS Code, Manual analysis.
Recommendations
Consider using _safe_mint instead of _mint.
Rewards breakdown
nSLOC
136This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.