Submission Details
Severity:
Insecure ERC20 Transfers in Treasury.sol
Summary
Both the deposit and the withdraw functions use raw ERC20 transfers without verifying success. Tokens that return false instead of reverting can be exploited to manipulate balances.
Vulnerability Details
Impact
Tools Used
manual
Recommendations
Use openzeppelin SafeERC20
Use SafeERC20
Updates
Lead Judging Commences
inallhonesty about 2 months ago
Submission Judgement Published Reason: Known issue
Assigned finding tags:
[INVALID] SafeERC20 not used
LightChaser Low-60
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.