Submission Details
Severity:
Unsafe transfer/transferFrom breaks compatibility with some of ERC20
Vulnerability Details
In depositCollateral and _redeemCollateral functions transferFrom and transfer calls made. While current implementation for WETH/WBTC is correct it may posses an obstacle for using contract other tokens, like USDT or BNB that do not return bool on these call and will always revert.
Impact
Restriction for possible tokens to be used as collateral.
Tools Used
Observation
Recommendations
Use safeTransfer/safeTransferFrom for IERC20(tokenCollateralAddress)
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
23664 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.