Description: The EggstravaganzaNFT
contract uses the _mint
function to create new ERC721 tokens, which does not check if the recipient is capable of receiving ERC721 tokens.
Impact:
If tokens are minted to a contract that does not implement the onERC721Received
function, they could become permanently locked, leading to loss of tokens.
The ERC721 standard recommends using _safeMint
to ensure safe transfers to contracts.
Recommended Mitigation: Replace _mint
with _safeMint
to include safety checks.
Protocol doesn't check if recipient contracts can handle ERC721 tokens
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.