The Standard

Summary

users can defined a token with similar symbol with native token and impact how functions send values.

Vulnerability Details:

in contacts there is a “NATIVE” symbol for native token. But there is no mechanism to prevent users from adding another token with similar and same symbol (I mean same to native token symbol), on the other hand, all operations on tokens are based on the token's symbol. So, it is possible that by introducing another token with a similar symbol (with native symbol), it could mess up the entire value sending.

Impact

It impacts function send which tokens to users ( native or another)

Tools Used

Manual

Recommendations:

Apply a method to paravent users define tokens whit similar symbol (similar to native token symbol)