The Standard

Description:

After the liquidated assets in LiquidationPoolManager is sold to the LiquidationPool, any amount unsold to the pool is forward from the LiquidationPoolManager to address protocol (treasury), using IERC20::transfer in forwardRemainingRewards() function. However, the return value of an external transfer call in forwardRemainingRewards() is not checked.

Impact:

Any delay in sending these tokens implies a delay for the liquidated asset to be sold, which puts EUROs at risk of undercollateralization.

Tools Used:

• Slither

Recommended Mitigation Steps:

Use SafeERC20, or ensure that the transfer return value is checked.