60,000 USDC
Submission Details
Severity:
`new_owners` used wrong address type in request.cairo
Summary
new_owners used wrong address type in request.cairo.
Vulnerability Details
request.cairo
struct Request {
........
........
........
// New owners on starknet. This allows a batch migration of the tokens to
// different owners.
// Must be empty if `owner_l2` is not 0. Otherwise, length must match `ids`.
@> new_owners: Span<ContractAddress>,
}
In request.cairo, new_owners use Span<ContractAddress> as address type. This is wrong.
L2's request is used to bridge from L2 to L1. So new owners are L1 address.
Impact
new_owners address type is wrong. L1 can't handle this address.
Tools Used
manual
Recommendations
struct Request {
........
........
........
// New owners on starknet. This allows a batch migration of the tokens to
// different owners.
// Must be empty if `owner_l2` is not 0. Otherwise, length must match `ids`.
- new_owners: Span<ContractAddress>,
+ new_owners: Span<EthAddress>,
}
Prize pool breakdown
Total prize
60,000 USDC
nSLOC
2,30126 USDC / LOC
50,000 USDC
5,500 USDC
4,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.