Submission Details
Severity:
subject: Unsafe ERC20 Operations should not be used, return values are not always meaningful
Summary
Unsafe ERC20 operations refer to potential vulnerabilities and inconsistencies in the implementation of the ERC20 token standard
that can lead to unexpected behavior or security risks in smart contracts interacting with these tokens.
Vulnerability Details
function purrrCollateralToAave(uint256 _ameowntToSupply) external onlyMeowntainer {
totalMeowllateralInVault -= _ameowntToSupply;
@> IERC20(i_token).approve(address(i_aavePool), _ameowntToSupply);
i_aavePool.supply( { asset: i_token, amount: _ameowntToSupply, onBehalfOf: address(this), referralCode: 0 } );
}
Impact
The protocal can get its funds locked.
Double Spending Allowances can occur thereby making the protocol to lose money
Tools Used
manual review
Recommendations
Use OpenZeppelin's SafeERC20 library.
Rewards breakdown
nSLOC
224This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.