Summary

Use safeTransfer/safeTransferFrom instead of transfer/transferFrom.

Vulnerability Details

Code does not check return values of transfer/transferFrom, and non-standard tokens may not return true even though the transfer succeeded.

Impact

Code may happily execute assuming a transfer succeeded when it actually failed.

Tools Used

Manual

Recommendations

Use safeTransfer/safeTransferFrom instead of transfer/transferFrom.