Home

Description

A security flaw in the '_transfer' function of a smart contract implementation for Money Making Opportunity (MMO), an Ethereum ERC721 Non-Fungible Token (NFT) project, allows users or attackers to transfer NFTs to the zero address, leading to permanent asset loss and non-compliance with the ERC721 standard. The eth address is 0x41d3d86a84c8507a7bc14f2491ec4d188fa944e7, contract name is MoneyMakingOpportunity, and compiler version is v0.8.17+commit.8df45f5f.

PUBLISHED Reserved 2025-08-16 | Published 2025-09-30 | Updated 2025-10-01 | Assigner mitre

References

github.com/...Vulnerabilities/MMO_Transfer_to_ZeroAddress.md

cve.org (CVE-2025-56207)

nvd.nist.gov (CVE-2025-56207)

Download JSON