Submission Details
Severity:
Using `ERC721::_mint()` to mint egg NFTs can cause egg NFTs to be stuck in contracts
Summary
Using ERC721::_mint() can mint ERC721 tokens to addresses which don't support ERC721 tokens. Hence, egg NFTs can be minted to addresses which does not have functions to transfer the egg NFTs out, thus causing the egg NFTs to be stuck in the contract forever.
Impact
Impact: Low, egg NFTs can be stuck in contracts forever
Likelihood: Low, players must be contracts instead of EOAs
Severity: Low
Tools Used
Aderyn
Recommendations
Use _safeMint() instead of _mint() for ERC721.
Updates
Lead Judging Commences
m3dython about 2 months ago
Submission Judgement Published Assigned finding tags:
Unsafe ERC721 Minting
Protocol doesn't check if recipient contracts can handle ERC721 tokens
Rewards breakdown
nSLOC
129This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.