Submission Details
Severity:
Empty `receive()` function
Summary
The receive() function is completely empty.
Vulnerability Details
There is 1 instance of this issue.
File: contracts/bridges/BridgeReth.sol
37: receive() external payable {}
| File Link | Instance Count | Instance Link |
|---|---|---|
| BridgeReth.sol | 1 | 37 |
Impact
The purpose of the code as written is ambiguous.
Tools Used
baudit: a custom static code analysis tool; manual review
Recommendations
If the intention is for Ether sent by a caller to be used for an actual purpose, the function should call another function (e.g. call depositEth() and use the token on the caller's behalf). At a minimum an event should be emitted to track that funds were sent directly to it.
Prize pool breakdown
Total prize
55,000 USDC
nSLOC
3,36516
USDC / LOC
50,000 USDC
5,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.