Submission Details
Severity:
Not Following SafeMint
Summary
We are not checking whether the receiver contract handles the NFTs or not when minting
Vulnerability Details
EggstravaganzaNFT::mintEgg function is using _mint and for a better safety check we need to use IERC721::_safeMint from openzeppelin
Impact - High
LikelyHood - High
Tools Used
Manul Review
Recommendations
Use ERC721::_safeMint instead of ERC721::_mint
And need to add IERC721Receiver in both EggHuntGame and EggVault contracts
Updates
Appeal created
lucky2892000
8 months ago
m3dython
8 months ago
m3dython
8 months ago
m3dython 8 months ago
Submission Judgement Published Assigned finding tags:
Unsafe ERC721 Minting
Protocol doesn't check if recipient contracts can handle ERC721 tokens
Rewards breakdown
nSLOC
129This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.