Fees contract cannot swap because of missing allowance
Summary
Fees contract is supposed to executing swaps on UniswapV3, which fails because of missing allowance.
Vulnerability Details
The Fees contract is used to swap received Fees to WETH and send them to the staking Contract. It uses UNIswapV3 router for this. However there is never any allowance given for the Tokens to swap to the UniswapV3 router contract.
Therefore all swaps would revert
Impact
sellProfits function will always revert because of missing allowance.
Attacker can make profit out of Fees contract by sandwiching a swap.
Tools Used
Manual Review
Recommendations
Call approve for the UniswapV3 router before executing the swap.
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.