Tadle

Summary

The natspec description of the withdraw function says that tokenAddress is nativeToken, the _transfer function should send the tokens from capitalPool to the msgsender, but it is actually sent from capitalPool to the tokenManager address itself.
It is only transferred from capitalPool to the sender if tokenAddress is an ERC20 token that differs from nativeToken.

Vulnerability Details

https://github.com/Cyfrin/2024-08-tadle/blob/04fd8634701697184a3f3a5558b41c109866e5f8/src/core/TokenManager.sol#L155-L156

Impact

For anyone reading the protocol code, it may be confused with natspec

Tools Used

Manual Review

Recommendations