Submission Details
Severity:
increaseAllowance exist but no function to decrease or withdraw allowance
Summary
There is an increase allowance but no funciotn that withdraws or decreases the allowance and give it back to the user
Vulnerability Details
function _increaseAllowance(address spender, uint256 amount) internal {
feeToken.approve(spender, feeToken.allowance(address(this), spender) + amount);
}
increaseAllowance can be used to increase allowance but no decreaseAllowance exist
Impact
Allowance cannot be decreased.
Tools Used
Code review
Recommendations
Implement a decreaseAllowance funcion
Updates
Prize pool breakdown
Total prize
21,000 USDC
nSLOC
1,03420 USDC / LOC
20,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.