Submission Details
Severity:
zero-value ERC20 token transfers can revert for certain tokens
Summary
zero-value ERC20 token transfers can revert for certain tokens
Vulnerability Details
Some ERC20 tokens revert for zero-value transfers (e.g. LEND). If used as a order.baseAsset and a small strike price, the fee token transfer will revert. Hence, assets and the strike can not be withdrawn and remain locked in the contract.
See Weird ERC20 Tokens - Revert on Zero Value Transfers
Impact
Instances (2):
File: src/Distributor.sol
147: erc20.safeTransfer(winners[i], amount);
164: token.safeTransfer(STADIUM_ADDRESS, token.balanceOf(address(this)));
Tools Used
Personal bot
Recommendations
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
19477 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.