Steadefi

Steadefi
DeFiHardhatFoundryOracle
35,000 USDC
View results
Submission Details
Severity: medium
Invalid

Potential Loss of Funds due to unvalidated ERC20 address

Summary

There is possibility of loss of fund in line 305 of the url provided above.

Vulnerability Details

If the contract holds funds in the addresses specified by _tokenFrom and _tokenTo, there is a possibility of losing access to the funds if the addresses are not ERC-20 contracts. This can make the contract to not be able to interact with the address properly

Impact

This can cause loss of funds

Tools Used

VS Code

Recommendations

It shoul be ensured that _tokenFrom and _tokenTo are valid ERC-20 token addresses before interacting with them as ERC-20 tokens.This can be done by verifying the token contracts' addresses against the ERC-20 standard, error handling can also be initiated to handle situations where the addresses are not valid ERC20s

Updates

Lead Judging Commences

hans Lead Judge almost 2 years ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.