NFTBridge
60,000 USDC
View results
Submission Details
Severity: medium
Invalid

There is a use of an undeclared variable

Summary

In `erc721_bridgeable.cairo::set_token_uri`, an unused variable _`exists` has been applied.

Vulnerability Details

The failure to declare this variable at the beginning poses a serious threat to the contract. `_exists` is supposed return a boolean `true` or `false`. A malicious user can define the variable to their needs. After doing so, they can custom the metadata to their preference, thus ending up manipulating the protocol and stealing.

Impact

The attacker could manipulate `set_token_uri`, set fake URIs and steal from other honest users.

Tools Used

Manual review

RecommendationsDeclare `_exists` variable at the struct `Storage`

Declare `_exists` variable at the struct `Storage`
Updates

Lead Judging Commences

n0kto Lead Judge 10 months ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.