wrong token address in Deploy.s.sol
Summary
the token address in the script is wrong (0x1D17CbCf0D6d143135be902365d2e5E2a16538d4).
Vulnerability Details
The token address that is used to deploy MerkleAirdrop.sol is different than the token actually transferred to the contract (nice try!).
Impact
The airdrop will fail here ( if not before) https://github.com/Cyfrin/2024-04-airdropper/blob/main/src/MerkleAirdrop.sol#L39 :
i_airdropToken.safeTransfer(account, amount);
as actual token in contract (0x1d17CBcF0D6D143135aE902365D2E5e2A16538D4) will be different than token specified ( 0x1D17CbCf0D6d143135be902365d2e5E2a16538d4 )
Tools Used
visual inspection
Recommendations
make sure to use same token address to deploy contract and to send to contract and make sure its the correct USDC.
Lead Judging Commences
usdc-wrong-address
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.