ArkProject: NFT Bridge
ArkProject
Submission Details
Severity: low
InvalidThe cancelRequest function in the contract allows the cancellation of any request without verifying the caller's authority or ownership of the request. This could lead to unauthorized request cancellations.
Updates
Lead Judging Commences
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity
Assigned finding tags:
invalid-cancel-callable-by-anyone
The process to cancel a message is detailed here: https://docs.starknet.io/architecture-and-concepts/network-architecture/messaging-mechanism/#l2-l1_message_cancellation Since `startRequestCancellation` has the `onlyOwner`, only the owner can begin that process.
Prize pool breakdown
Total prize
60,000 USDC
nSLOC
2,30126 USDC / LOC
High Medium
50,000 USDC
Low
5,500 USDC
Judges
4,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Community Judging
Submissions are being reviewed by the community.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.