Submission Details
Severity:
Public depositEgg Function allows fake deposits
Summary
Vulnerability Details
Anyone can call depositEgg and set any depositor, potentially allowing a malicious actor to "deposit" an NFT on behalf of another address, locking it until the fake depositor withdraws.
Impact
Potential griefing or confusion
Tools Used
manual review
Recommendations
Restrict depositEgg to the NFT owner or depositor
function depositEgg(uint256 tokenId) public {
require(eggNFT.ownerOf(tokenId) == address(this), "NFT not transferred to vault");
require(!storedEggs[tokenId], "Egg already deposited");
storedEggs[tokenId] = true;
eggDepositors[tokenId] = msg.sender;
emit EggDeposited(msg.sender, tokenId);
}
Updates
Lead Judging Commences
m3dython 8 months ago
Submission Judgement Published Assigned finding tags:
Frontrunning Vulnerability DepositEgg
Front-running depositEgg allows deposit ownership hijacking.
Rewards breakdown
nSLOC
129This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.