ArkProject: NFT Bridge

Summary: Messaging contract for cross-component communication.

Vulnerability Details:

• Reentrancy Potential: SWC-107: External call may lead to reentrancy.

  (bool success, ) = target.call(data);

  Line: 67

• Message Validation: SWC-136: Input validation is critical.

  require(isValidMessage(msg.sender), "Invalid message sender");

  Line: 45

Impact: Malicious messages could compromise the system.

Tools Used: Manual code inspection.

Recommendations:

• Reentrancy Fix: Apply ReentrancyGuard for safety.

  import "@openzeppelin/contracts/security/ReentrancyGuard.sol";

• Validation Fix: Strengthen input validation logic.

  require(isValidMessage(msg.sender), "Invalid message sender");