60,000 USDC
Submission Details
Severity:
Probable reentrancy in `bridge.cairo::withdraw_auto_from_l1`
Summary
There's a probable reentrancy in `bridge.cairo::withdraw_auto_from_l1` due to the external functions `IERC721BridgeableDispatcher` and `IERC721Dispatcher`.
Vulnerability Details
The attacker could find a way to creatively craft an attack contract that would call the `withdraw_auto_from_l1` repeatedly without updating state.
Impact
Illegal withdraw funds using `withdraw_auto_from_l1`
Tools Used
Manual review
Recommendations
Use reentrancy guard from OpenZeppelin on functions bearing external calls on such critical functions like `withdraw_auto_from_l1` by manipulating the minting process.
Prize pool breakdown
Total prize
60,000 USDC
nSLOC
2,30126 USDC / LOC
50,000 USDC
5,500 USDC
4,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.