When withdrawing NFTs on L1, _mint is used to mint new NFTs to recipients.
It might lead to loss of NFTs if NFTs are transferred to Smart Contract wallets.
It should use _safeMint instead.
Please, do not suppose impacts, think about the real impact of the bug and check the CodeHawks documentation to confirm: https://docs.codehawks.com/hawks-auditors/how-to-determine-a-finding-validity A PoC always helps to understand the real impact possible.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.