Tadle

Summary

When TokenManager transfers Ether to the receiver, the transfer may be reverted because the 2300 gas may be run out if the receiver is one AA account or contract, and there is some logic when they receive Ether.

Vulnerability Details

When traders want to withdraw Ether, the contract will use transfer to transfer tokens to the trader. Considering that there is one 2300 gas limit for transfer() function , the transfer() might be reverted if the trader account is one AA account or one contract.

Impact

The traders may not withdraw the ether because of out-of-gas revert.

Tools Used

Manual

Recommendations

Suggest using low-level call and check the return value.