[fix] reentrancy attack on 721 (#146)

Author: jasonzwli

contracts/token/erc721/abstract/ERC721Hybrid.sol

@@ -262,8 +262,9 @@ abstract contract ERC721Hybrid is ERC721PsiBurnable, ERC721, IImmutableERC721Err
         if (_burnedTokens.get(tokenId)) {
             revert IImmutableERC721TokenAlreadyBurned(tokenId);
         }
-        ERC721._mint(to, tokenId);
+        
         _idMintTotalSupply++;
+        ERC721._mint(to, tokenId);
     }
 
     /** @notice safe mints number of tokens specified to a multiple specified addresses via erc721
@@ -278,8 +279,9 @@ abstract contract ERC721Hybrid is ERC721PsiBurnable, ERC721, IImmutableERC721Err
         if (_burnedTokens.get(tokenId)) {
             revert IImmutableERC721TokenAlreadyBurned(tokenId);
         }
-        ERC721._safeMint(to, tokenId);
+
         _idMintTotalSupply++;
+        ERC721._safeMint(to, tokenId);    
     }
 
     /** @notice mints multiple tokens by id to a specified address via erc721 

contracts/token/erc721/abstract/ImmutableERC721Base.sol

@@ -240,10 +240,12 @@ abstract contract ImmutableERC721Base is
         if (mintRequest.to == address(0)) {
             revert IImmutableERC721SendingToZerothAddress();
         }
+        
+        _totalSupply = _totalSupply + mintRequest.tokenIds.length;
         for (uint256 j = 0; j < mintRequest.tokenIds.length; j++) {
             _mint(mintRequest.to, mintRequest.tokenIds[j]);
         }
-        _totalSupply = _totalSupply + mintRequest.tokenIds.length;
+        
     }
 
     /** @notice safe mints a batch of tokens with specified ids to a specified address

contracts/token/erc721/preset/ImmutableERC721MintByID.sol

@@ -38,17 +38,17 @@ contract ImmutableERC721MintByID is ImmutableERC721Base {
      *  @param tokenID the ID of the token to mint
      */
     function safeMint(address to, uint256 tokenID) external onlyRole(MINTER_ROLE) {
-        _safeMint(to, tokenID, "");
         _totalSupply++;
+        _safeMint(to, tokenID, "");
     }
 
     /** @notice Allows minter to safe mint `tokenID` to `to`
      *  @param to the address to mint the token to
      *  @param tokenID the ID of the token to mint
      */
     function mint(address to, uint256 tokenID) external onlyRole(MINTER_ROLE) {
-        _mint(to, tokenID);
         _totalSupply++;
+        _mint(to, tokenID);
     }
 
     /**