Submission Details
Severity:
The return value from the token transfer is not checked.
Vulnerability Details
Some ERC20 tokens don't throw but just return false when a transfer fails. This can lead to a loss of funds when users try to claimCut, if the recipient tries to claimCut before rewards are sent to the pot, it will revert with most tokens, but for tokens with this vulnerability the transaction will go through and the user won't get their funds. A good example of such a token is ZRX: Etherscan code.
Impact
Loss of funds
Tools Used
Slither
Recommendations
Use SafeErc20 to mitigate this issue as well as others like it.
Rewards breakdown
nSLOC
106This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.