Eggstravaganza

First Flight #37
Beginner FriendlySolidity
100 EXP
View results
Submission Details
Severity: medium
Valid

Unsafe `ERC721::_mint()`

Summary

Using `ERC721::_mint()` can mint ERC721 tokens to addresses which don't support ERC721 tokens.

Impact

Using `_mint()` instead of `_safeMint()` can permanently lock NFTs in non-ERC721-compatible contracts, leading to irreversible token loss.
This means if the `EggstravaganzaNFT` doesn't approve before calling the `mint()` it will revert.

Recommendations

Use `_safeMint()` instead of `_mint()` for ERC721 tokens.
Updates

Lead Judging Commences

m3dython Lead Judge 10 months ago
Submission Judgement Published
Invalidated
Reason: Too generic

Appeal created

the2ke Submitter
10 months ago
m3dython Lead Judge
10 months ago
the2ke Submitter
10 months ago
m3dython Lead Judge
10 months ago
the2ke Submitter
10 months ago
m3dython Lead Judge 10 months ago
Submission Judgement Published
Validated
Assigned finding tags:

Unsafe ERC721 Minting

Protocol doesn't check if recipient contracts can handle ERC721 tokens

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.

Give us feedback!