Submission Details
Severity:
NFT Burning Instead of Transfer
Summary
The buyOutEstateNFT function burns the NFT instead of transferring it to the buyer.
Vulnerability Details
After payments, nft.burnEstate(_nftID) destroys the NFT, contradicting the intended ownership transfer.
Impact
The buyer gains no NFT ownership, undermining the asset settlement process.
Tools Used
Manual review.
Recommendations
Transfer the NFT to the buyer:
nft.safeTransferFrom(address(this), msg.sender, _nftID);
Rewards breakdown
nSLOC
211This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.