Tadle

Summary

User can withdraw all the tokens from the capital pool.

Suppose a user creates an offer and have TaxIncomes or SalesRevenue. For example, when user withdraw TaxIncome from TokenManager contract, there's no initialize of TaxIncome in this function after sending funds. So user can withdraw so many times while capital pool has enough tokens.

Tools Used

Manual Review

Recommendations

Add initialize statement in the withdraw function of TokenManager.sol.

function withdraw(

address _tokenAddress,

TokenBalanceType _tokenBalanceType

) external whenNotPaused {

​

...

userTokenBalanceMap[_msgSender()][

_tokenAddress

][_tokenBalanceType] = 0;

emit Withdraw(

_msgSender(),

_tokenAddress,

_tokenBalanceType,

claimAbleAmount

);

}