Summary

Unchecked transferFrom in lines 64,94

Vulnerability Details

In the contract BridgeReth.sol , the return values of ERC20 transferFrom are not checked to be true, which could be false if the transferred tokens are not ERC20-compliant. In that case, the transfer fails without being noticed by the calling contract.

Tools Used

Manual

Recommendations

Use the SafeERC20 library implementation from Openzeppelin and call safeTransfer or safeTransferFrom when transferring ERC20 tokens.