Submission Details
Severity:
Use `safeTransferFrom()` instead of `transferFrom()` to transfer NFTs
Summary
Using transferFrom() can cause the NFT to be permanently lost. The safeTransferFrom() can check that the contract recipients are aware of the ERC721 protocol to prevent tokens from being locked forever.
Vulnerability Details
15 IERC20(_token).transferFrom(msg.sender, _to, _amount);
9 IERC20(params_.tokenIn).transferFrom(msg.sender, address(this), params_.amountIn);
25 stETH.transferFrom(msg.sender, address(this), stETHAmount_);
Tools Used
vs code
Recommendations
To use safeTransferFrom()
Prize pool breakdown
Total prize
22,500 USDC
nSLOC
1,05421 USDC / LOC
20,000 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.