Tadle

Summary

Funds of contract participating in the premarket.sol and tokenmanager.sol can become stuck due to

• not having the fallback function

• having a fallback function execute another function say, transfer to owner on receive msg.value

Vulnerability Details

Funds of contracts (bundler contracts, contracts built on Tadle premarkets, arb bots, etc) participating in the premarket.sol and tokenmanager.sol can become stuck on withdraw due to

• not having the fallback function

• having a fallback function execute another function say, transfer to owner on receive msg.value or emit event due to 2300 hardcoded gas used

This will revert always and cause stuck funds for owner of contract which could be significant depending on the use case. While it has a high impact, it is unlikely as most contracts dealing with eth have fallback functions as a rule of thumb but still possible

Impact

Stuck Funds

Tools Used

Manual Review

Recommendations

• use .send / .call{value: 2300} instead and on status false, transfer it in weth