Airdrop function is not compatible with USDC if decimal format is wrong
Summary
TSender::airdropERC20 function, incorrectly handles decimal usage for USDC token amounts and will fail the transaction.
Vulnerability Details
The TSender::airdropERC20 function did not initially check if the token amounts provided were in the correct decimal format for the specific ERC20 token (USDC). Because of the missing check in TSender::areListsValid when we try to airdrop USDC TSender::airdropERC20 function will fail.
Impact
The TSender::airdropERC20 function won't work with USDC if the decimal format is wrong.
Tools Used
Manual Review
Recommendations
Decimal Check in TSender::areListsValid to check that amounts are in the correct decimal format for the token being airdropped.
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.