ArkProject: NFT Bridge

NFTBridge
60,000 USDC
Submission Details
Severity: medium
Valid

A malicious actor can stuck other unsuspecting users' tokens forever

Updates

Lead Judging Commences

n0kto Lead Judge 20 days ago
Submission Judgement Published
Validated
Assigned finding tags:

finding-withdraw-reentrancy-creates-unbridgeable-tokens

Impact: - NFT already bridged won’t be bridgeable anymore without being stuck. Likelyhood: Low. - Attackers will corrupt their own tokens, deploying a risky contract interacting with an upgradable proxy. They have to buy and sell them without real benefits, except being mean. Some really specific and rare scenario can also trigger that bug.

Appeal created

0xAsen Submitter
20 days ago
0xAsen Submitter
18 days ago
n0kto Lead Judge
10 days ago
n0kto Lead Judge 9 days ago
Submission Judgement Published
Validated
Assigned finding tags:

finding-withdraw-reentrancy-creates-unbridgeable-tokens

Impact: - NFT already bridged won’t be bridgeable anymore without being stuck. Likelyhood: Low. - Attackers will corrupt their own tokens, deploying a risky contract interacting with an upgradable proxy. They have to buy and sell them without real benefits, except being mean. Some really specific and rare scenario can also trigger that bug.

Support

FAQs

Can’t find an answer? Join our Discord or follow us on Twitter.