Submission Details
Severity:
Funds for minting RAAC NFT are stuck in RAACNFT contract
Summary
Funds for minting RAAC NFT are stuck in RAACNFT contract.
Vulnerability Details
To mint a RAAC NFT, funds are transferred from user to RAACNFT contract.
// transfer erc20 from user to contract - requires pre-approval from user
token.safeTransferFrom(msg.sender, address(this), _amount);
However, RAACNFT provides no functionality for withdrawing the funds, as a result, the funds are stuck inRAACNFT contract.
Impact
Funds are stuck in RAACNFT contract.
Tools Used
Manual Review
Recommendations
Implement functionalities to withdraw funds from RAACNFT contract.
Updates
Lead Judging Commences
inallhonesty 4 months ago
Submission Judgement Published Assigned finding tags:
RAACNFT collects payment for NFT minting but lacks withdrawal functionality, permanently locking all tokens in the contract
inallhonesty 4 months ago
Submission Judgement Published Assigned finding tags:
RAACNFT collects payment for NFT minting but lacks withdrawal functionality, permanently locking all tokens in the contract
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.