DeFiFoundry
20,000 USDC
View results
Submission Details
Severity: medium
Invalid

Use of transfer method to claim tokens is risky

Summary

Some auction tokens can lead to a loss of funds for the user if the transfer method doesn't work when claiming tokens from the auction.

Vulnerability Details

The vulnerability is here :

https://github.com/Cyfrin/2024-08-fjord/blob/0312fa9dca29fa7ed9fc432fdcd05545b736575d/src/FjordAuction.sol#L220

Using transfer method can lead to a loss of funds from the user if the transfer doesn't work ( like the use of an erc20 pausable which is paused temporarily).

Impact

Loss of funds

Tools Used

Manual review

Recommendations

Use safeTransfer method from a safeTransferLib

Updates

Lead Judging Commences

inallhonesty Lead Judge about 1 year ago
Submission Judgement Published
Invalidated
Reason: Known issue

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.