mediumAccess controlEVM-Solidity
TraitForge: Incorrect `isApprovedForAll` check in the `NukeFund.nuke()` function
- Payout
- $0
- Protocol
- TraitForge
- Disclosed
- Sep 13, 2024
- Source
- code4rena
TraitForge's NukeFund.nuke() burns an entity NFT to convert its forging value into ETH, but its second approval gate checks whether the CALLER has granted NukeFund operator status via isApprovedForAll(msg.sender, address(this)), instead of whether the actual t …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-07-traitforge-findings/issues/159
- https://github.com/code-423n4/2024-07-traitforge-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.