ERC20 transferFrom
& transfer
functions return a boolean value indicative of the transfer's success. This value is being ignored and not checked. This may lead to inconsistent state in the protocol.
This issue is widespread in the codebase.
Slither
Ideally, use SafeERC20
& safeTransfer
and safeTransferFrom
. Kindly, refer to Openzeppelin docs:
Openzeppelin SafeERC20
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.