Summary

Use safeTransfer instead of transfer to avoid accounting errors.

Vulnerability Details

Impact

transfer() might return false instead of reverting, in this case, ignoring return value leads to considering it successful.

Tools Used

Manual Review

Recommendations

Consider using safeTransfer()/safeTransferFrom() instead of transfer()/transferFrom() and import the safe ERC20 Library from Open Zeppelin.