can't delete whitelisted collection on starknet
Github Link
Summary
When there are more than one whitelisted collections, and you try to disable a collection, the _white_list_collection function won't remove the collection passed into the function except the collection is the self.white_listed_head.read()
Vulnerability Details
collection deletion won't work because the prev pointer is not updated during deletion
Impact
collection deletion won't work
Recommendations
add prev = next; after this line
https://github.com/Cyfrin/2024-07-ark-project/blob/main/apps/blockchain/starknet/src/bridge.cairo#L537
Lead Judging Commences
finding-L2-unwhitelist-from-third collection-impossible
Likelyhood: High, owner can only unwhitelist the 2 first collections. Impact: Medium/High, owner has to empty the list to remove any collection, and replace all the new ones.
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.