Submission Details
Severity:
The `Fees` contract don't approve the `swapRouter` contract
Summary
The Fees contract don't approve the swapRouter contract
Vulnerability Details
The sellProfits function always revert because the swapRouter contract don't have allowance
Impact
The tokens received by Fees contract will be stuck forever
Recommendations
Approve the swapRouter contract before exactInputSingle call:
@@ -27,6 +27,8 @@ contract Fees {
require(_profits != WETH, "not allowed");
uint256 amount = IERC20(_profits).balanceOf(address(this));
+ IERC20(_profits).approve(address(swapRouter), amount);
+
ISwapRouter.ExactInputSingleParams memory params = ISwapRouter
.ExactInputSingleParams({
tokenIn: _profits,
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628
USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.