Skip to content
Request an audit

‹ Findings database

Lost nfts due to smart wallets having different addresses on different chains

Crit/HighMetaZero Omnichain NFTs audit·Three Sigma·Omnichain RWA tokenisation·27th January, 20243S-MetaZero-H02

Description

send() sends the tokens to the same address that called the function. Some smart contract wallets may have different addresses on different chains (or even chains with different address generation).

Recommendation

Let the user specify a destination address to send the nfts to.

Status

Addressed in 5f138f1.

Source

Disclosed by 0xSimao · Sherlock's 2025 Watson of the Year · 21 first places in 57 audit contests