The updateAssetAllowance
function makes an external call to the approve
function of the asset token contract without checking the return value.
The updateAssetAllowance
function calls the approve
function of the asset token contract without checking the return value. If the approve
function fails, the updateAssetAllowance
function will not revert, and the caller may not be aware that the allowance update failed.
If the approve
function fails, the caller may not be aware that the allowance update failed, leading to potential issues with asset management and user confusion.
Manual code review and analysis.
Use the require
function to check the return value of the approve
function and revert if it fails.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.