Skip to content

Latest commit

 

History

History
29 lines (15 loc) · 1.01 KB

063.md

File metadata and controls

29 lines (15 loc) · 1.01 KB

moneyversed

high

beforeTokenTransfer function allows the transfer of NFTs to non-verified addresses

Summary

The _beforeTokenTransfer function does not prevent NFT transfers to non-verified addresses. This could lead to potential issues with NFT ownership and loan management.

Vulnerability Detail

In the LenderManager.sol contract, the _beforeTokenTransfer function allows NFT transfers to non-verified addresses, which could lead to issues with NFT ownership and loan management.

Impact

NFT transfers to non-verified addresses could compromise the platform's integrity and lead to issues with loan management.

Code Snippet

https://github.com/sherlock-audit/2023-03-teller/blob/main/teller-protocol-v2/packages/contracts/contracts/LenderManager.sol#L74

Tool used

Manual Review

Recommendation

Add checks to the _beforeTokenTransfer function to ensure that NFTs can only be transferred to verified addresses. This will help maintain the platform's integrity and prevent issues with loan management.