highFront-running / MEVEVM-Solidity
reNFT: All orders can be hijacked to lock rental assets forever by tipping a malicious ERC20
- Payout
- $0
- Protocol
- reNFT
- Disclosed
- Mar 20, 2024
- Source
- code4rena
reNFT's Create contract acts as a Seaport zone that validates and stores orders as rentals when fulfilled. Because Seaport derives the order hash using only the totalOriginalConsiderationItems count, an order fulfiller can extend the consideration array at ful …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-01-renft-findings/issues/614
- https://github.com/code-423n4/2024-01-renft-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.