1 matches found
TridentNFT.permit should always check recoveredAddress != 0
Handle cmichel Vulnerability details The TridentNFT.permit function ignores the recoveredAddress != 0 check if isApprovedForAllownerrecoveredAddress is true. Impact If a user accidentally set the zero address as the operator, tokens can be stolen by anyone as a wrong signature yield...
6.9AI score
SaveExploits0
20