The TempleTeleporter
contract allows for cross-chain transfer of Temple
tokens. The teleport
function is not making any fee estimation for cross-chain transfers, potentially causing burned / not send tokens.
Lack of estimation of required gas fees for cross-chain transactions. msg.value
is used directly without estimating the necessary fees using the quote
function.
The quote
function should be used to calculate the required gas fees before executing the transaction to ensure that msg.value
is sufficient.
If the gas fees are not correctly estimated, transactions may fail due to insufficient funds, leading to potential loss of funds or tokens being burned / locked in the contract without successful transfer.
Manual code review
Estimate Fees: Integrate the quote
function to estimate the required fees for the transaction.
Validate msg.value
: Ensure that msg.value
is sufficient to cover the estimated fees before proceeding with the transaction.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.