Submission Details
Severity:
Attacker could create malicious ERC20 token to interact with contract
Summary
Attacker could create malicious ERC20 token to interact with contract
Vulnerability Details
The safetransfer function inside the _deposit function may interact with a malicious ERC20 contract.
Tools Used
Manual Review
Recommendations
Get the limited amount of known ERC20 tokens in SablierFlow.
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
69929 USDC / LOC
19,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.