First Flight #9: Soulmate

Vulnerability Details

If the balance of the vault contract is low, it might not be able to cover the entire amount calculated for distribution. In such a scenario, the code reduces tokenToDistribute to the balance of the token held by the vault contract, potentially resulting in users receiving fewer tokens than expected.

For example, if the value of

is 100 and the

is 50

In this case, user will only get 50 tokens instead of 100

Impact

If the airdrop vault balance is low, users may receive fewer tokens than they are entitled to.

Tools Used

Manual

Recommendations

It is recommended to add a conditional statements to verify the availability of tokens and adjusting the distribution process accordingly.