TSender

Cyfrin
DeFiFoundry
15,000 USDC
View results
Submission Details
Severity: high
Invalid

Airdrop function is not compatible with USDC if decimal format is wrong

Summary

TSender::airdropERC20 function, incorrectly handles decimal usage for USDC token amounts and will fail the transaction.

Vulnerability Details

The TSender::airdropERC20 function did not initially check if the token amounts provided were in the correct decimal format for the specific ERC20 token (USDC). Because of the missing check in TSender::areListsValid when we try to airdrop USDC TSender::airdropERC20 function will fail.

Impact

The TSender::airdropERC20 function won't work with USDC if the decimal format is wrong.

Tools Used

Manual Review

Recommendations

Decimal Check in TSender::areListsValid to check that amounts are in the correct decimal format for the token being airdropped.

Updates

Lead Judging Commences

inallhonesty Lead Judge about 1 year ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.