60,000 USDC
Submission Details
Severity: high
ValidAn attacker could repeatedly bridge L2 NFTs to L1, potentially triggering an out-of-gas DoS attack on the `withdrawTokens` functionality
Updates
Lead Judging Commences
Submission Judgement Published
Validated
Assigned finding tags:
finding-collections-always-withelisted-on-both-chain-withdraw-impossible-collections-array-will-be-OOG
Likelyhood: High, once the whitelist option is disabled, collections will grow. Impact: High, withdraw won’t be possible because of Out-Of-Gas.
Prize pool breakdown
Total prize
60,000 USDC
nSLOC
2,30126 USDC / LOC
High Medium
50,000 USDC
Low
5,500 USDC
Judges
4,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.