Submission Details
Severity:
`TempleTeleporter::teleport` should allow user specify refund address
Summary
TempleTeleporter::teleport will refund to payable(msg.sender), this may not work as intended for some contract callers. If there is no sweep function, this would cause lock/loss of funds.
Vulnerability Details
TempleTeleporter::teleport will refund to payable(msg.sender).
receipt = _lzSend(dstEid, _payload, options, MessagingFee(msg.value, 0), payable(msg.sender));
However, this may cause issues if msg.sender is a contract which lacks the ability to sweep ETH. This would cause lock/loss of funds.
Impact
If the msg.sender is a contract, this may cause lock/loss of refunded funds.
Tools Used
Manual
Recommendations
Allow user specify the refund address.
Prize pool breakdown
Total prize
25,000 USDC
nSLOC
99825 USDC / LOC
20,000 USDC
2,500 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.