Submission Details
Severity:
Lack of Token Withdrawal Function in RAACNFT Contract
Description
The RAACNFT contract contains a critical vulnerability where tokens sent to the contract become permanently locked. It lacks any mechanism to withdraw the funds sent when users mint RAACNFT.
Impact:
Permanent loss of funds.
No way to withdraw collected ERC20 tokens
Fix Recommendation:
Add functions to withdraw sent tokens
function withdrawTokens(address _token) external onlyOwner {
IERC20(_token).safeTransfer(owner(), IERC20(_token).balanceOf(address(this)));
}
Updates
Lead Judging Commences
inallhonesty 5 months ago
Submission Judgement Published Assigned finding tags:
RAACNFT collects payment for NFT minting but lacks withdrawal functionality, permanently locking all tokens in the contract
inallhonesty 5 months ago
Submission Judgement Published Assigned finding tags:
RAACNFT collects payment for NFT minting but lacks withdrawal functionality, permanently locking all tokens in the contract
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.