Submission Details
Severity:
ERC20's transferFrom lacks explicit allowance check.
Summary: ERC20's transferFrom lacks explicit allowance check.
Vulnerability Details: The function deducts allowance without an explicit check, relying on underflow reverts. While safe, it deviates from best practices
Impact: Low. Code quality issue with no direct exploitation
Tools Used: Manual code review
Recommendations : Add an explicit check (assert self.allowance[_from][msg.sender] >= _value) before deduction
Rewards breakdown
nSLOC
127This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.