Submission Details
Severity:
Unchecked Return Values from External Calls
Summary
External calls to the ERC20 token contract (for example, IERC20(depositToken).safeTransfer(user_, amount_)) do not check return values.
Vulnerability Details
If the safetransfer function fails then amount should not be subtracted from total deposits in public pools & event emitted should reflect the same
Impact
User calls withdraw function & he doesnt receive funds still his balance will be debited
Tools Used
Visual inspection
Recommendations
Check the return value from safetransfer function if it fails revert line 278.
Updates
Prize pool breakdown
Total prize
22,500 USDC
nSLOC
1,05421 USDC / LOC
20,000 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.