Introduction
Getting started
This audit reviews the CollectorCrypt contract: a UUPS-upgradeable ERC-721 that doubles as the migration target for the existing Slab token — a holder can burn their Slab and atomically mint an equivalent CollectorCrypt.
The review is line-by-line and entry-point driven, focused on the upgrade-safety of the storage layout, the migration path from Slab, and the consistency of the reentrancy and authorization model across the batch surface. Findings are ordered by severity and each includes context, impact, and a recommended fix.