functions does not check whether the lengths of the arrays submitted are equal. This can lead to unexpected results.
If the length of the arrays are not required to be of the same length, user operations may not be fully executed.
If the ids array is a shorter length than the other arrays, the additional values in the other arrays will be ignored. This could lead to transfers with unexpected results, which would be better served by reverting.
Manual Review
Add a check to the function that confirms that to, ids, and accounts are all equal length.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.