Skip to content

Conversation

grod220
Copy link
Member

@grod220 grod220 commented Jul 7, 2025

Audit remediation. For NonTransferable extension (and possibly others in the future), the ImmutableOwner extension is required on the token account. The current logic indiscriminately already adds ImmutableOwner to the vec check given ATAs require them. This means there is a duplicate that would result and cause the escrow to close despite being valid.

This PR fixes that issue by only adding ImmutableOwner if not present.

@grod220 grod220 requested review from joncinque and buffalojoec July 7, 2025 11:23
Copy link

@buffalojoec buffalojoec left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Lgtm!

@grod220 grod220 force-pushed the close-escrow-mitigation branch from 1082442 to bce8e4b Compare July 8, 2025 06:45
@grod220 grod220 merged commit d44afaf into main Jul 8, 2025
11 checks passed
@grod220 grod220 deleted the close-escrow-mitigation branch July 8, 2025 07:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants