_safeMint() should be used rather than _mint() wherever possible

[code423n4]

Lines of code

https://github.com/code-423n4/2022-10-holograph/blob/main/src/enforcer/HolographERC721.sol#L307
https://github.com/code-423n4/2022-10-holograph/blob/main/src/enforcer/HolographERC721.sol#L415

Vulnerability details

_safeMint() should be used rather than _mint() wherever possible

_mint() is discouraged in favor of _safeMint() which ensures that the recipient is either an EOA or implements IERC721Receiver. Both open OpenZeppelin and solmate have versions of this function so that NFTs aren’t lost if they’re minted to contracts that cannot transfer them back out.

Instances

HolographERC721.sol:L307

src/enforcer/HolographERC721.sol:307:    _mint(to, tokenId);

HolographERC721.sol:L415

src/enforcer/HolographERC721.sol:415:    _mint(to, token);

Recommendations:

Use _safeMint() instead of _mint().

[gzeoneth]

Duplicate of #462

[gzeoneth]

As QA report