Submission Details
Severity:
Not recommended to use `transfer` function to send funds
Summary
Description: The SpookySwap contract uses the transfer in the withdrawFees function to send funds to the owner. The transfer function is not recommended to use because it has a limited gas stipend. If the user has a fallback function that consumes more than the gas stipend, the user will not receive the funds.
Line of code: TrickOrTreat.sol#L148
Impact
The owner may not receive the funds.
Tools Used
Manual code analysis
Recommendations
Consider using the send or call function to send funds to the owner.
Updates
Appeal created
bube 10 months ago
Submission Judgement Published Assigned finding tags:
Use of `transfer` instead of `call`
Rewards breakdown
nSLOC
109This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.