Camp - NFT

The `DisputeModule` contract uses a global `isUsedEvidenceHash` mapping to prevent duplicate evidence submission across all disputes. However, this design enables malicious actors to permanently block legitimate disputes by front-running evidence hashes. When a dispute is raised in `raiseDispute()`, the evidence hash is marked as used globally and permanently, even if the dispute is later cancelled via `cancelDispute()`. Since the Camp network relies on a private mempool, there's no potential for the classic frontrunning exploitation. However, IP Owners may still be able to foresee future evidence hashes that can be blocked by raising throwaway disputes with the same evidence hash, then cancelling before the cooldown period elapses to recover their bond while permanently burning the evidence hash.

Access to tokens can be bought via the `Marketplace` contract following a subscription model. The `hasAccess()` function is used by offchain components to evaluate if a user has access to some token. Currently, this depends on the state of the token and the state of the subscription. Therefore, users need subscriptions to their own tokens to have the expected access. A similar issue arises during the token minting process, where the royalty module ensures that the minter had subscriptions to all parent tokens in the past. Again, minters are required to have had subscriptions to their own tokens.