Vyper Vested Claims
First Flight #34
Beginner FriendlyDeFi
100 EXP
View results
Previous Next
Submission Details
Severity: high
Invalid

Missing @nonreentrant Modifier in the Claim Function

0xshaedyw

Summary

The claim function lacks reentrancy protection.

Vulnerability Details

  • The claim function interacts with an external token contract (IERC20.transfer), which could be exploited for reentrancy attacks.

@external
def claim(...) -> bool:
...
_success: bool = extcall IERC20(self.token).transfer(user, claimable)

Impact

  • Potential reentrancy attacks if the token contract is malicious.

Tool

  • Manual Review

Recommendations

  • Add @nonreentrant to the claim function:

@external
@nonreentrant
def claim(...) -> bool:
...
Updates

Appeal created

bube Lead Judge 4 months ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.