DatingDapp

Summary

The MultiSigWallet contract() allows ETH deposits via the receive() function, but it does not emit an event when funds are received. This makes it difficult to track incoming transactions, leading to reduced transparency and monitoring issues.

Vulnerability Details

Affected Code:

receive() external payable {}

Secure Code:

event Deposit(address indexed sender, uint256 amount);

receive() external payable {
emit Deposit(msg.sender, msg.value);
}

Impact

• Users cannot track deposits on-chain without actively monitoring contract balances.

• Auditors and owners lack visibility into incoming funds, making debugging harder.

Tools Used

Manually

Recommendations

Modify the receive() function to emit an event when ETH is deposited.