Submission Details
Severity:
Trustee-Contract Interaction Conflict
Summary
The Trustee can override assetToPay globally, conflicting with per-NFT payment token logic.
Vulnerability Details
The setAssetToPay function (callable by the trustee) changes the global payment token, disrupting existing NFT payment terms.
Impact
Unexpected payment token changes could invalidate prior NFT agreements.
Tools Used
Manual review.
Recommendations
Decouple trustee functions from NFT-specific settings. Use a per-NFT mapping for assetToPay as recommended earlier.
Updates
Lead Judging Commences
0xtimefliez 6 months ago
Submission Judgement Published Assigned finding tags:
global asset in NFT values
Rewards breakdown
nSLOC
211This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.