Sigvex
SolanaRemediation1 min read

NFT Royalty Bypass Remediation

How to fix NFT royalty enforcement bypass patterns.

svmfund-safety

NFT Royalty Bypass Remediation

Overview

Related Detector: NFT Royalty Bypass

NFT transfers without royalty enforcement harm creators. The fix is to use the NFT metadata program’s Transfer instruction (pNFTs) which enforces royalties on-chain, or to implement explicit royalty calculation and payment.

Impact. Moving a programmable NFT through a plain SPL token transfer skips the on-chain royalty enforcement the pNFT standard exists to guarantee, so marketplaces and traders route around creator payments entirely. The loss is economic rather than stolen principal — unpaid royalties on every bypassed sale — but it silently defeats the revenue model the collection was built on.

Use the NFT metadata program Transfer instead of direct SPL Token transfers for NFTs:

invoke(
    &mpl_token_metadata::instruction::transfer(
        TransferArgs::V1 { amount: 1, authorization_data: None },
        /* all required accounts */
    ),
    accounts,
)?;

Common Mistakes

Mistake: Using SPL Token Transfer for pNFTs

// WRONG: bypasses royalty enforcement
token::transfer(ctx.accounts.into_ctx(), 1)?;

pNFTs require transfer through the Token Metadata program.

References