Sparkn

Summary

Having multiple token addresses can lead to asset loss.

Vulnerability Details

Some ERC20 tokens on the blockchain are deployed behind a proxy, so they have at least 2 entry points (the proxy and the implementation) for their functionality. Example is Synthetix’s ProxyERC20 contract from where you can interact with sUSD, sBTC etc).There is a way to rescue the token stuck in the proxy contract after the deployment and distribution of prizes only when the token is whitelisted. If the token is not whitelisted, and then if someone sent the token by mistake, the token will be stuck there forever.If such tokens are used to interact with the contract, it could result in financial losses. Furthermore, if someone transfers such tokens to the contract without being on the contract's whitelist, the funds could become permanently stuck within the contract.

Impact

Having multiple token addresses can lead to asset loss.

Tools Used

vscode

Recommendations

It's advisable to maintain multiple whitelist addresses for tokens associated with multiple addresses.