Submission Details
Severity:
Reverting Transfers Instead of Preventing in a Cleaner Way
Summary
https://github.com/Cyfrin/2025-02-raac/blob/main/contracts/core/tokens/veRAACToken
Vulnerability Details
The contract overrides ERC20’s transfer and transferFrom functions, making them revert transactions:
function transfer(address to, uint256 amount) public override returns (bool) {
revert TransferNotAllowed();
}
Impact
Causes confusion when interacting with the contract, as standard ERC20 behavior is overridden.
Can lead to unexpected behavior in third-party integrations.
Tools Used
Manual Review
Recommendations
Instead of overriding these functions, consider using a nonTransferable modifier to restrict transfers in a more structured manner.
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.