Summary

Use safeTransfer/safeTransferFrom instead of transfer/transferFrom.

Vulnerability Details

Some tokens won't revert in fail transfers, instead they return a false bool return value.
The protocol is not handling bool-return tokens.

Impact

Protocol may continue or update the state of contract without considering the false-transfers.

Tools Used

Manual Review

Recommendations

Consider using safeTransfer/safeTransferFrom