Platform: Code4rena
Start Date: 21/08/2023
Pot Size: $125,000 USDC
Total HM: 26
Participants: 189
Period: 16 days
Judge: GalloDaSballo
Total Solo HM: 3
Id: 278
League: ETH
Rank: 67/189
Findings: 1
Award: $181.37
🌟 Selected for report: 0
🚀 Solo Findings: 0
🌟 Selected for report: bart1e
Also found by: 0x3b, 0xCiphky, Aymen0909, HHK, Inspex, bin2chen, chaduke, gkrastenov, jasonxiale, josephdara, kodyvim, peakbolt, pep7siup, rokinot, rvierdiiev, tapir
181.367 USDC - $181.37
https://github.com/code-423n4/2023-08-dopex/blob/main/contracts/amo/UniV3LiquidityAmo.sol#L330
The admin has the right to recover an ERC721 token in the UniV3LiquidityAMO
contract. He needs to call recoverERC721
and provide the tokenAddress
and token_id
values, where the token with token_id
will be transferred to the rdpxV2Core
contract.
INonfungiblePositionManager(tokenAddress).safeTransferFrom( address(this), rdpxV2Core, token_id );
The problem arises when an NFT is transferred to rdpxV2Core
because it becomes locked within the contract and the removeLiquidity
function can not be used.
Mannual Review
Add the possibility for ERC721 tokens to be transferred from the rdpxV2Core
contract.
ERC721
#0 - c4-pre-sort
2023-09-09T06:40:57Z
bytes032 marked the issue as duplicate of #106
#1 - c4-pre-sort
2023-09-12T06:09:57Z
bytes032 marked the issue as sufficient quality report
#2 - c4-pre-sort
2023-09-12T06:12:28Z
bytes032 marked the issue as duplicate of #935
#3 - c4-judge
2023-10-20T18:05:16Z
GalloDaSballo marked the issue as satisfactory