Submission Details
Severity:
executeOperation return status not checked,
Summary
Vulnerability Details
The execueOperation function called in the flashloanreceiver was not checked to confirm transaction actually went successful before proceeding.
Impact
It is possible for the Operation done with flashloan taken from thunderloan to fail without having a knowledge until the end of transaction which could lead to fundLoss.
Tools Used
Manual review.
Recommendations
functionCall returned bytes which can be decoded to get the status of the transaction, it recommended for the team to look into the return data and confirm the status of the transaction
Rewards breakdown
nSLOC
387This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.