Submission Details
Impact:
Likelihood:
No Safety Checks on collectFee() Withdrawals
Summary
Failure of either WETH or ETH transfer may leave the contract in inconsistent state or lock funds.
Description
WETH transfer uses raw .transfer(), lacks success verification.
ETH fallback uses low-level .call(), but still may fail.
No partial recovery or rollback if one succeeds and other fails.
POC
no POC
Impact
Loss of funds.
Partial transfers.
Stuck balances.
Severity
MEDIUM
Likelihood
MEDIUM
Recommendation
Use safeTransfer for WETH.
Handle ETH failure with proper revert or fallback logic.
Rewards breakdown
nSLOC
215This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.