mediumSignature replayEVM-Solidity
NFT marketplace signature does not bind to token id allowing order swap
- Payout
- $60k
- Protocol
- NFT Marketplace
- Disclosed
- May 21, 2024
- Source
- cantina
An NFT marketplace implemented an off-chain EIP-712 order signing mechanism that failed to include the token ID within the signed struct hash. Because the token ID was accepted directly from unverified calldata during order execution, malicious actors could sw …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.