Project

Summary

The protocol exhibits an architectural inconsistency in its token transfer safety mechanisms. The Factory contract directly uses transferFrom without SafeERC20 wrapper, potentially causing failures with non-compliant ERC20 tokens. This oversight could lead to transaction failures and poor user experience.

Vulnerability Details

- MembershipFactory.sol lacks SafeERC20 implementation:

Impact

1. Token Integration Risks:

- Non-standard tokens will cause transaction failures - Platform functionality blocked for key tokens

2. User Experience Issues: - Failed transactions waste gas

- Inconsistent behavior across different tokens - Reduced protocol reliability

Tools Used

Manual Review

Recommendations

Implement OpenZeppelin's SafeERC20 wrapper functions in the Factory contract