Submission Details
Severity:
we need to use safeTransferFrom instead of transferFrom
Summary
We are not checking whether the receiver contract handles the NFTs or not
Vulnerability Details
EggVault::withdrawEgg function is using transferFrom and for a better safety check we need to use ERC721::safeTransferFrom from openzeppelin
Impact - Medium
LikelyHood - High
Tools Used
Manul Review
Recommendations
use ERC721::safeTransferFrom instead of ERC721::transferFrom
And need to add IERC721Receiver in both EggHuntGame and EggVault contracts
Rewards breakdown
nSLOC
129This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.