Project
One World
NFTDeFi
15,000 USDC
View results
Previous Next
Submission Details
Severity: high
Invalid

Weird Erc20 Exploit

astrotimi

Summary

Since the One World Project involves USDC ,the contract might get blacklisted due to the Erc20 token used thereby causing the user to be denylisted.

Vulnerability Details

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.17;
​
import "@openzeppelin/contracts/token/ERC20/ERC20.sol";
​
contract OWPERC20 is ERC20 {
​
​
address public immutable owner;
​
​
constructor(string memory name, string memory symbol) ERC20(name, symbol){
owner = msg.sender;
}
​
function mint(address account, uint256 amount) external {
_mint(account, amount);
}
}

Impact

If USDC blacklists the contract , the protocol will be frozen and that will be very sad.

Tools Used

Manual Review

Recommendations

The best way to protect against this problem is to know the token we are expected to interact with . At the end of the day Erc20 are external contracts and we need to defend against them.

We can consider using SafeERC20

Updates

Lead Judging Commences

0xbrivan2 Lead Judge 10 months ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement
0xbrivan2 Lead Judge 10 months ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.