ArkProject: NFT Bridge

Summary:

In State.sol The code doesn't explicitly check the validity of the parameters l2Address and l2Selector in the setStarklaneL2Address and setStarklaneL2Selector functions.

Vulnerability Details:

Potential Risks:

Invalid addresses or selectors could be set.

Impact:

Could lead to incorrect or failed messaging to Starknet L2.

Tools Used:

Manual

Recommendations:

Validate l2Address and l2Selector before setting.
Add require statements to ensure valid inputs.
Example:

require(l2Address > 0, "Invalid L2 address");
require(l2Selector > 0, "Invalid L2 selector");