Submission Details
Severity:
Using `ERC721::_mint()` can be dangerous
Summary
Using ERC721::_mint()can minted ERC721 tokens to addresses which don't support ERC721 tokens.
Vulnerability Details
GivingThanks::donate(address)use _mint()to mint NFT to doner, however, there is no receiver checks forERC721::_mint(). If receiver is a smart contract without implementing IERC721Receiver, ERC721 token will be locked or lost.
Impact
Tools Used
Recommendations
Using _safeMint()instead of _mint()
Rewards breakdown
nSLOC
67This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.