mediumLogic errorEVM-Solidity
AI Arena: NFTs can be transferred even if StakeAtRisk remains, so the user's win cannot be recorded on the chain due to underflow, and can recover past losses that can't be recovered (steal protocol's token)
- Payout
- $0
- Protocol
- AI Arena
- Disclosed
- May 14, 2024
- Source
- code4rena
AI Arena's RankedBattle integration lets a Fighter NFT become transferable as soon as its NRN stake is fully withdrawn, even when stake-at-risk tokens remain bookkept against the prior owner. Because losses decrement a per-owner, round-agnostic amountLost accu …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-02-ai-arena-findings/issues/137
- https://github.com/code-423n4/2024-02-ai-arena-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.