Platform: Code4rena
Start Date: 05/04/2022
Pot Size: $30,000 USDC
Total HM: 10
Participants: 47
Period: 3 days
Judge: gzeon
Total Solo HM: 4
Id: 106
League: ETH
Rank: 41/47
Findings: 1
Award: $51.87
🌟 Selected for report: 0
🚀 Solo Findings: 0
🌟 Selected for report: IllIllI
Also found by: 0v3rf10w, 0x1f8b, 0xDjango, 0xkatana, BouSalman, CertoraInc, Dravee, FSchmoede, Hawkeye, Kenshin, Meta0xNull, PPrieditis, Ruhum, TerrierLover, VAD37, WatchPug, berndartmueller, csanuragjain, hake, horsefacts, hubble, m9800, rayn, reassor, robee, samruna, securerodd, shenwilly, sorrynotsorry, t11s, teryanarmen, tintin, z3s
51.8678 USDC - $51.87
https://github.com/code-423n4/2022-04-backed/blob/main/contracts/LendTicket.sol#L27 The _transfer() function does not check if to address is not same as loanfacilitator
it.only('reverts if caller is not loan facilitator', async function () { await expect( LendTicket.connect(punkHolder).loanFacilitatorTransfer(CryptoPunks.address, pretendNFTLoanFacilitator.address, "115792089237316195423570985008687907853269984665640564039457584007913129639935") ).to.be.revertedWith("NFTLoanTicket: only loan facilitator") })
#0 - wilsoncusack
2022-04-07T12:32:52Z
won't fix