Summary

_transferDeposit can fail if recipient is a malicious contract

Vulnerability Details

if the recipient address is a contract that has a receive function that has revert() in it the function, the transaction will revert and
cause A DOS on the function and protocol.

Impact

This can cause a denial of service and and make the system not to work an intended. funds can get stuck in the contract

Tools Used

manual

Recommendations

track how much must be sent to the recipient address and store it in a mapping and allow the recipient
to withdraw the funds themselves.