Summary

The current implementation of the Ark bridge does not provide a mechanism for users to claim airdrops or other benefits associated with their NFTs while the tokens are locked in the bridge contract. This could lead to users missing out on valuable opportunities or benefits tied to their NFT ownership.

Vulnerability Details

The bridge contracts (L1 and L2) does not include any functionality for users to claim airdrops or other NFT-associated benefits. Indeed, NFTs are held by the bridge contract during the cross-chain transfer process, potentially for extended periods, and during this time, users lose the ability to interact with their NFTs directly, which could prevent them from claiming airdrops or participating in other NFT-specific events.

Impact

Users may miss out on airdrops or other benefits associated with their NFTs while they are locked in the bridge.

Tools Used

Manual review

Recommendations

Implement a mechanism that allows users to claim airdrops or other benefits for their NFTs while they are locked in the bridge.