Useless Nft
Submitted by (3) berndartmueller, also found by byndooa and rbserver
Summary:
https://code4rena.com/reports/2022-08-rigor/#m-11-owner-of-project-nft-has-no-purpose
Creating a new project mints a NFT to the _sender
(builder). The builder
of a project has special permissions and is required to perform various tasks.
However, if the minted NFT is transferred to a different address, the builder
of a project stays the same and the new owner of the transferred NFT has no purpose and no permissions to access authorized functions in Rigor.
Mitigation:
Consider preventing transferring the project NFT to a different address for now as long as there is no use-case for the NFT owner/holder or use the actual NFT owner as the builder
of a project.
Last updated