search

exo-digital-labs / ERC721R

https://erc721r.super.site/
MIT License
240 stars 60 forks source link

Fix:Should be prohibited refundAddress call refund function #14

Closed f0rmatting closed 2 years ago

f0rmatting commented 2 years ago

should be prohibited refundAddress call refund

elie222 commented 2 years ago

I'm not sure the blacklist solves the issue :( If owner mints 100, transfers them all to owner2, then owner2 refunds. owner2 receives 10eth and owner receives 100 nfts. And they can keep repeating.

We just merged in a PR to tackle this issue here: https://github.com/exo-digital-labs/ERC721R/pull/9

Happy to hear your thoughts.