Submission Details
Severity:
claim() may fail
Summary
claim() may fail
Vulnerability Details
claim() defaults to take out all the value of the user's claimable, but if the WEth in the contract is insufficient, then the user can't take out 1wei.
function claim() external {
updateFor(msg.sender);
WETH.transfer(msg.sender, claimable[msg.sender]);//@audit
claimable[msg.sender] = 0;
balance = WETH.balanceOf(address(this));
}
Impact
claim() may fail
Tools Used
vscode
Recommendations
it is recommended to modify it to specify the reward value to be taken out
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.