TempleGold
TempleDAO
Foundry
25,000 USDC
View results
Previous Next
Submission Details
Severity: high
Valid

Smart contract wallet won't be able to transfer TGLD to other chains

0xlrivo

Summary

Smart contract wallet won't be able to transfer TGLD to other chains.

Vulnerability Details

The documentation states that users can only transfer TGLD cross-chain to self, which is properly enforced in TempleGold.sol:send():

/// @dev user can cross-chain transfer to self
if (msg.sender != _to) { revert ITempleGold.NonTransferrable(msg.sender, _to); }

However, since smart contract wallets like Gnosis Safes (which the team uses), do have different addresses on different chains making impossible for those wallets to transfer their TGLD cross-chain.

Impact

Smart contract wallets, like Gnosis Safes, won´t be able to transfer their TGLD cross-chain.

Tools Used

Manual Review

Recommendations

Remove the limitation of only transferring TGLD cross-chain to self to also allow smart contracts wallet to use this functionality.

Updates

Lead Judging Commences

inallhonesty Lead Judge 10 months ago
Submission Judgement Published
Validated
Assigned finding tags:

Account abstraction, Multisig, Any other contract based solution that doesn't share the same address across chains will lose it's TGLD in teleport.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.