Submission Details
Severity:
Unsafe ERC20 Operations Used
Description: The contract uses unsafe ERC20 operations that may not behave as expected. Some ERC20 implementations have inconsistent return value behaviors.
_to.transfer(refundValue);
Impact:
Potential silent failures in token transfers
Inconsistent behavior across different token implementations
Risk of failed transactions without proper error handling
Recommended Mitigation: Implement OpenZeppelin's SafeERC20 library for all ERC20 operations:
import {SafeERC20} from "@openzeppelin/contracts/token/ERC20/utils/SafeERC20.sol";
using SafeERC20 for IERC20;
function _refundERC20(address _to) internal {
i_WETH.safeTransfer(_to, balances[_to][address(i_WETH)]);
i_WBTC.safeTransfer(_to, balances[_to][address(i_WBTC)]);
i_USDC.safeTransfer(_to, balances[_to][address(i_USDC)]);
}
Updates
Lead Judging Commences
0xtimefliez 7 months ago
Submission Judgement Published Assigned finding tags:
transfer instead of call
0xtimefliez 7 months ago
Submission Judgement Published Assigned finding tags:
transfer instead of call
Rewards breakdown
nSLOC
129This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.