TSender

Summary

USDT, USDC and LINK tokens have no implementations on some of the target deployment chains. So there is no guarantee of correct integration when the implementations will appear.

Vulnerability Details

According to the contest documentation expected token integrations are USDT, USDC, LINK and WETH, and target deployment chains are zkSync Era, Ethereum, Arbitrum, Optimism, Base and Blast.

Unfortunately only WETH token has implementations on all listed chains currently.

In turn LINK and USDC have no implementations on Blast chain (https://docs.chain.link/resources/link-token-contracts, https://www.circle.com/en/multi-chain-usdc).

USDT has no trusted implementations on Base and Blast chains (https://basescan.org/tokens , https://blastscan.io/tokens).

Since the implementations are absent no one can guarantee the protocol can integrate with them.

Impact

Though the likelihood of unsupported implementations appearing is low the potential impact, e.g. asset losses, is high.

Tools used

Manual Review

Recommendations

Consider reducing the list of supported tokens on Base and Blast chains according to the provided information.