Submission Details
Severity:
Arbitrary from passed to transferFrom
Vulnerability Details :
An arbitrary from address to transferFrom (or safeTransferFrom) can lead to loss of funds because anyone can transfer tokens from the from address if approval is made.
Found in contracts/Distribution.sol Line: 204
IERC20(depositToken).safeTransferFrom(_msgSender(), address(this), amount_);
Impact:
It can lead to loss of funds because anyone can transfer tokens from the from address.
Tools Used:
aderyn
Prize pool breakdown
Total prize
22,500 USDC
nSLOC
1,05421 USDC / LOC
20,000 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.