Submission Details
Severity:
whitelisted token can be an eoa or a non-erc20 contract
Summary
whitelisted token can be an eoa or a non-erc20 contract resulting in either tx failure on distribute
Vulnerability Details
There is no check that the whitelisted address is a contract and complies to erc20 standard
Impact
transaction failures when distributing funds due to an invalid whitelisted token
Tools Used
manual review
Recommendations
Add a code size check & check if the total supply > 0
uint size;
assembly {
size := extcodesize(_whitelistedTokens[i])
}
if (size == 0) revert();
&
if (IERC20(_whitelistedTokens[i]).totalSupply == 0) revert();
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
19477 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.