OpenSea Seaport 1.2 contest - charlesjhongc's results

A marketplace protocol for safely and efficiently buying and selling NFTs.

General Information

Platform: Code4rena

Start Date: 13/01/2023

Pot Size: $100,500 USDC

Total HM: 1

Participants: 23

Period: 10 days

Judge: hickuphh3

Total Solo HM: 1

Id: 201

League: ETH

OpenSea

Findings Distribution

Researcher Performance

Rank: 21/23

Findings: 1

Award: $140.67

QA:
grade-b

🌟 Selected for report: 0

🚀 Solo Findings: 0

Findings Information

Awards

140.6728 USDC - $140.67

Labels

bug
grade-b
QA (Quality Assurance)
Q-04

External Links

Amount of ERC721 transfer should be checked

The amount of ERC721 transfer should be one. It's check in lib/Executor.sol(L348-L350) and lib/Executor.sol(L209-L211) but only in conduitKey == bytes32(0) cases. It should be checked whether via conduit or not. Otherwise it may cause failure when conduit execute it later.

Also, the related natspec description of _transferERC721() function doesn't seem correct. The amount must be 1 for ERC721, not identifier.

#0 - HickupHH3

2023-01-25T15:52:18Z

Regarding the check, I believe it's expected behaviour.

Agree with incorrect natspec description, which is a low issue. 1 low = 5 pts, just meeting cutoff.

#1 - c4-judge

2023-01-25T15:52:22Z

HickupHH3 marked the issue as grade-b

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter