Submission Details
Severity:
USDC `transfer` return value is ignored in `MoneyShelf::withdrawUSDC`, causing transfer status is unchecked
Description
The function MoneyShelf::withdrawUSDC ignores return value of usdc.transfer, so even if the transfer fails sliently (as long as it doesnt revert), it will still brun crimeMoney.
Impact
bank[to] might be changed, and crimeMoney might be burnt, even if no USDC is transferred out of MoneyShelf.
Recommendations
check the return value of usdc.transfer, if transfer fails, revert the tx
require(usdc.transfer(to, amount), "Token transfer failed");
Rewards breakdown
nSLOC
205This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.