First Flight #9: Soulmate

Summary

ERC20 functions may not behave as expected.

Vulnerability Details

• Found in src/Airdrop.sol Line: 84

  loveToken.transferFrom(

• Found in src/Staking.sol Line: 55

  loveToken.transferFrom(msg.sender, address(this), amount);

• Found in src/Staking.sol Line: 64

  loveToken.transfer(msg.sender, amount);

• Found in src/Staking.sol Line: 92

  loveToken.transferFrom(

Impact

Return values are not always meaningful in these particular cases.

Tools Used

Aderyn

Recommendations

It is recommended to use OpenZeppelin's SafeERC20 library.