CVE-2025-56207: Medium severity Ethereum ERC721 Non-Fungible Token vulnerability
A security flaw in the 'transfer' function of a smart contract implementation for Money Making Opportunity (MMO), an Ethereum ERC721 Non-Fungible Token (NFT) project, allows users or attackers to transfer NFTs to the zero address, leading to permanent asset loss and non-compliance with the ERC721 standard. The eth address is 0x41d3d86a84c8507a7bc14f2491ec4d188fa944e7, contract name is MoneyMakingOpportunity, and compiler version is v0.8.17+commit.8df45f5f.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-56207?
CVE-2025-56207 is classified as a critical severity vulnerability due to its potential to cause permanent asset loss.
How do I fix CVE-2025-56207?
To fix CVE-2025-56207, update the smart contract implementation to prevent transfers to the zero address.
What types of attacks can CVE-2025-56207 enable?
CVE-2025-56207 can enable attackers to permanently lose NFTs by transferring them to a non-retrievable zero address.
Who is affected by CVE-2025-56207?
The vulnerability affects users and developers of Ethereum ERC721 Non-Fungible Token projects, particularly those using the vulnerable '_transfer' function.
What are the implications of CVE-2025-56207 on NFT legality?
CVE-2025-56207 raises compliance issues with ERC721 standards due to the potential for asset loss and non-recoverable transactions.