Submission Details
Severity:
Use safeTransfer()/safeTransferFrom() instead of transfer()/transferFrom()
Summary
Only use transfer and transferFrom to deal with tokens
Vulnerability Details
Some ERC20 tokens do not revert on failure in transfer but instead return false as a return value
Impact
Tokens that don't actually perform the transfer and return false are still counted as a correct transfer and tokens that don't correctly implement the latest EIP20 spec, like USDT, will be unusable in the protocol as they revert the transaction because of the missing return value
Tools Used
Manual Review
Recommendations
Use openzeppelin safeERC20 library to safe transfer ERC20 tokens
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
23664 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.