ArkProject: NFT Bridge
ArkProject
Submission Details
Severity: low
InvalidLack of access control lead to Bridge Owned and loss of NFTs by front running L1 bridge initialize
Updates
Lead Judging Commences
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity
Assigned finding tags:
invalid-bridge-initialize-frontrun
If frontrun at the first deployment, protocol will deploy again, no real impact: informational. Moreover it is already deployed and initialize on mainnet. For the upgrades, `initialize` can/will change for the next update since the owner is already set. A lot of protocol make that change. That’s why I consider it like a future feature and it is out of scope.
Prize pool breakdown
Total prize
60,000 USDC
nSLOC
2,30126 USDC / LOC
High Medium
50,000 USDC
Low
5,500 USDC
Judges
4,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Community Judging
Submissions are being reviewed by the community.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.