ArkProject: NFT Bridge
ArkProject
NFTBridge
60,000 USDC
View results
Previous Next
Submission Details
Severity: low
Invalid

NFT cannot be bridged back to its original chain once it has been removed from whitelist

meeve

Summary

User might bridge his NFT to different chain, and once that collection would be removed from the whitelist by its owner, he won't be able to bring it back to the original chain.

Vulnerability Details

That check present in deposit_tokens function would not allow to bridge it.

assert(_is_white_listed(@self, collection_l2), 'Collection not whitelisted');

Impact

User would have his original NFT locked in the escrow.

Tools Used

Manual Review

Recommendations

Once the collection is not supported, the protocol should still allow to bridge the NFT to its original chain.

Updates

Lead Judging Commences

n0kto Lead Judge about 1 year ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity
Assigned finding tags:

Informational / Gas

Please, do not suppose impacts, think about the real impact of the bug and check the CodeHawks documentation to confirm: https://docs.codehawks.com/hawks-auditors/how-to-determine-a-finding-validity A PoC always helps to understand the real impact possible.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.