Submission Details
Severity:
Not Following SafeMint
Summary
We are not checking whether the receiver contract handles the NFTs or not when minting
Vulnerability Details
EggstravaganzaNFT::mintEgg function is using _mint and for a better safety check we need to use IERC721::_safeMint from openzeppelin
Impact - High
LikelyHood - High
Tools Used
Manul Review
Recommendations
Use ERC721::_safeMint instead of ERC721::_mint
And need to add IERC721Receiver in both EggHuntGame and EggVault contracts
Updates
Appeal created
lucky2892000
10 months ago
m3dython
10 months ago
m3dython
10 months ago
m3dython 10 months ago
Submission Judgement Published Assigned finding tags:
Unsafe ERC721 Minting
Protocol doesn't check if recipient contracts can handle ERC721 tokens
Rewards breakdown
nSLOC
129This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.