Blacklist of USDC can prevent the claiming of the airdrop locking the funds in the contract
Summary
The USDC token contract includes a blacklist functionality that can prevent recipients from withdrawing funds. If a recipient address is added to the blacklist, the funds allocated for the airdrop in the MerkleAirdrop contract may become unclaimable and remain locked.
Impact
The USDC funds may become inaccessible and locked within the MerkleAirdrop contract.
Tools Used
Manual review
Recommendations
Consider using a different token that does not have a blacklist feature, such as DAI, to avoid the risk of funds becoming locked due to the blacklist functionality of USDC.
Lead Judging Commences
Invalid according to docs
https://docs.codehawks.com/hawks-auditors/how-to-determine-a-finding-validity#findings-that-may-be-invalid
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.