Submitted by zzzitron
https://github.com/code-423n4/2022-11-ens/blob/2b0491fee2944f5543e862b1e5d223c9a3701554/contracts/wrapper/NameWrapper.sol#L512
https://github.com/code-423n4/2022-11-ens/blob/2b0491fee2944f5543e862b1e5d223c9a3701554/contracts/wrapper/NameWrapper.sol#L550
Below is a snippet of the proof of concept. The whole code can be found in this gist. And how to run test is in the comment in the gist.
As in the wrapper/README.md:
Also, an expired name should go to Unregistered state per the graph suggests.
But, as the proof of concept below shows, after expiration, NameWrapper.ownerOf(node) is zero but ens.owner(node) is not zero. It is Unwrapped state based on the wrapper/README.md.
Since an expired name is technically unwrapped, even a parent with CANNOT_CREATE_SUBDOMAIN can set the owner or records of the subdomain as the proof of concept below shows.
foundry
Unclear as the NameWrapper cannot set ENS.owner after expiration automatically.
Alex the Entreprenerd (judge) commented:
jefflau (ENS) confirmed and commented:
Alex the Entreprenerd (judge) commented:
Alex the Entreprenerd (judge) commented:
zzzitron (warden) commented:
csanuragjain (warden) commented:
