OWPIdentity::setURI updates the token's URI without emitting the required URI event. This violates the ERC-1155 metadata extension spec which the OWPIdentity contract heavily depends on which mandates that all URI changes must emit an event.
Changes to the URI MUST emit the
URIevent if the change can be expressed with an event (i.e. it isn't dynamic/programmatic).
Key word here is "MUST" and according to RFC 2119:
MUST: This word, or the terms "REQUIRED" or "SHALL", mean that the definition is an absolute requirement of the specification.
Consider modifying setURI to emit the URI event after updating the base URI
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.