Snowman Merkle Airdrop

First Flight #42
Beginner FriendlyFoundrySolidityNFT
100 EXP
View results
Submission Details
Impact: low
Likelihood: low
Invalid

'collectFee()' Is Vulnerable to Denial via Failed WETH Transfer

Description: If the WETH transfer fails or is non-compliant, collectFee() reverts entirely, blocking ETH collection as well.

Impact: The collector could be permanently blocked from collecting fees due to one side failing.

Proof of Concept: If WETH transfer fails, this line halts execution:

i_weth.transfer(s_collector, collection);

Recommended Mitigation: Separate ETH and WETH collection into two safe functions. Add try-catch or fallback on failure.

Updates

Lead Judging Commences

yeahchibyke Lead Judge 3 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.