stake.link

stake.link
DeFiHardhatBridge
27,500 USDC
View results
Submission Details
Severity: low
Invalid

Large transfers may not work with some `ERC20` tokens

Summary

Large transfers may not work with some ERC20 tokens

Vulnerability Details

Some IERC20 implementations (e.g UNI, COMP) may fail if the valued transferred is larger than uint96. Source

Impact

Instances (3):

File: contracts/core/ccip/SDLPoolCCIPControllerSecondary.sol
154: IERC20(rewardTokens[i]).safeTransfer(sdlPool, _message.destTokenAmounts[i].amount);

154

File: contracts/core/ccip/WrappedTokenBridge.sol
145: tokenToTransfer.safeTransfer(_receiver, tokenToTransfer.balanceOf(address(this)));

145

File: contracts/core/ccip/base/SDLPoolCCIPController.sol
122: tokenToTransfer.safeTransfer(_receiver, tokenToTransfer.balanceOf(address(this)));

122

Tools Used

Recommendations

Updates

Lead Judging Commences

0kage Lead Judge over 1 year ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.