Submission Details
Severity:
Large transfers do not work with some ERC20 tokens
Summary
Large transfers do not work with some ERC20 tokens
Vulnerability Details
Some IERC20 implementations (e.g UNI, COMP) have special case logic in approve that sets allowance to type(uint96).max if the approval amount is uint256, may cause issues with systems that expect the value passed.
Impact
The above tokens may fail if the valued transferred is larger than uint96.
Tools Used
Manual code review
Recommendations
The recommendation is to not use such tokens for reward purpose or either carry out transactions in batches with maximum value transferred being within the type(uint96).max limit.
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
19477 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.