NFTBridge
60,000 USDC
View results
Submission Details
Severity: medium
Invalid

There is a use of an undeclared variable

Summary

In `erc721_bridgeable.cairo::set_token_uri`, an unused variable _`exists` has been applied.

Vulnerability Details

The failure to declare this variable at the beginning poses a serious threat to the contract. `_exists` is supposed return a boolean `true` or `false`. A malicious user can define the variable to their needs. After doing so, they can custom the metadata to their preference, thus ending up manipulating the protocol and stealing.
​

Impact

The attacker could manipulate `set_token_uri`, set fake URIs and steal from other honest users.

Tools Used

Manual review

RecommendationsDeclare `_exists` variable at the struct `Storage`

Declare `_exists` variable at the struct `Storage`
Updates

Lead Judging Commences

n0kto Lead Judge about 2 years ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.

Give us feedback!