Eggstravaganza

First Flight #37
Beginner FriendlySolidity
100 EXP
View results
Submission Details
Severity: medium
Valid

Unsafe `ERC721::_mint()`

Summary

Using `ERC721::_mint()` can mint ERC721 tokens to addresses which don't support ERC721 tokens.

Impact

Using `_mint()` instead of `_safeMint()` can permanently lock NFTs in non-ERC721-compatible contracts, leading to irreversible token loss.
This means if the `EggstravaganzaNFT` doesn't approve before calling the `mint()` it will revert.

Recommendations

Use `_safeMint()` instead of `_mint()` for ERC721 tokens.
Updates

Lead Judging Commences

m3dython Lead Judge 8 months ago
Submission Judgement Published
Invalidated
Reason: Too generic

Appeal created

the2ke Submitter
8 months ago
m3dython Lead Judge
8 months ago
the2ke Submitter
8 months ago
m3dython Lead Judge
8 months ago
the2ke Submitter
8 months ago
m3dython Lead Judge 8 months ago
Submission Judgement Published
Validated
Assigned finding tags:

Unsafe ERC721 Minting

Protocol doesn't check if recipient contracts can handle ERC721 tokens

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.

Give us feedback!