60,000 USDC
Submission Details
Severity:
Weak input validation in the cairo mint_from_bridge function
Summary
there is no access control for the 'to' address in the function
Vulnerability Details
In erc721_bridgeable.cairo::mint_from_bridge function_ 'to' address can be set to zero address by mistake and which can lock our erc721 in it forever
Impact
Locking of token forever by mistake...
Tools Used
Mannual
Recommendations
add a check to 'to' address input too in the function
Updates
Lead Judging Commences
n0kto 12 months ago
Submission Judgement Published Reason: Non-acceptable severity
Assigned finding tags:
Informational / Gas
Please, do not suppose impacts, think about the real impact of the bug and check the CodeHawks documentation to confirm: https://docs.codehawks.com/hawks-auditors/how-to-determine-a-finding-validity A PoC always helps to understand the real impact possible.
Prize pool breakdown
Total prize
60,000 USDC
nSLOC
2,30126 USDC / LOC
50,000 USDC
5,500 USDC
4,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.