NFTBridge
60,000 USDC
View results
Submission Details
Severity: low
Invalid

NFT holder can lose discord privileges during bridging.

Summary

When assigning roles to NFT holders in Discord, the role is usually granted after verifying the NFT ownership in the user's wallet. This allows holders to access exclusive channels reserved for them. However, when an NFT holder bridges their token from L1 to L2, the token is moved into escrow contract from user wallet. As a result, the Discord bot may mistakenly identify this as the holder no longer possessing the NFT, leading to the automatic removal of the assigned role.

Impact

This issue causes the user to lose access to private Discord channels, which are meant to be available only to verified NFT holders.

Recommendation

Implement a mechanism to recognize and account for NFTs that are in escrow due to bridging, ensuring that roles are not removed from users in these cases. Alternatively, update the verification process to accommodate NFTs that have been moved to L2, preserving the user's access to the exclusive channels.

Updates

Lead Judging Commences

n0kto Lead Judge 9 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity
Assigned finding tags:

invalid-NFT-with-priviledges-could-lose-them

Loss of rewards not associed to the protocol: https://docs.codehawks.com/hawks-auditors/how-to-determine-a-finding-validity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.