Tadle

Summary

Inside TokenManager::withdraw, `transfer` is limited to 2300 gas, so there is a possibility that the receiver can revert

Vulnerability Details

Withdraw function transfers ETH to the msg.sender, if the token is a wrapped native eth token. The protocol use `transfer` function , which is limited to 2300 gas. If msg.sender consumes more gas when receiving the ETH, this will always revert

Impact

Some withdrawal can revert dot to lack of gas

Tools Used

Manual review

Recommendations

Use call function with success check, instead of transfer