Submission Details
Severity:
Missing check for transfer and transferFrom() return values
Some tokens don't implement EIP20 correctly which means they don't revert on failed transfers. Examples include but aren't limited to USDT, EURS and BAT.
https://etherscan.io/token/0xdb25f211ab05b1c97d595516f45794528a807ad8#code
https://etherscan.io/token/0x0d8775f648430679a709e98d2b0cb6250d2887ef#code
This will allow pool managers and borrowers to participate in the lending / borrowing without having required funds.
Mitigation steps:
Check transfer and transferFrom return values
Use safeERC20.sol library from openzepplin
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.