ArkProject: NFT Bridge

NFTBridge
60,000 USDC
Submission Details
Severity: low
Invalid

Initializer function can be front run

Updates

Lead Judging Commences

n0kto Lead Judge 23 days ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity
Assigned finding tags:

invalid-bridge-initialize-frontrun

If frontrun at the first deployment, protocol will deploy again, no real impact: informational. Moreover it is already deployed and initialize on mainnet. For the upgrades, `initialize` can/will change for the next update since the owner is already set. A lot of protocol make that change. That’s why I consider it like a future feature and it is out of scope.

Support

FAQs

Can’t find an answer? Join our Discord or follow us on Twitter.