Submission Details
Severity:
No Approval Check Before Transfer
Summary
withdrawEgg in EggVault contract calls eggNFT.transferFrom without verifying that the vault is approved to transfer the NFT. If approval is revoked (e.g., by a malicious user after deposit), the call will fail.
Vulnerability Details
Impact
Withdrawal can be blocked, locking NFTs in the vault.
Tools Used
manual review
Recommendations
Check approval or use safeTransferFrom
require(eggNFT.getApproved(tokenId) == address(this), "Vault not approved");
eggNFT.transferFrom(address(this), msg.sender, tokenId);
Rewards breakdown
nSLOC
129This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.