Submission Details
Impact:
Likelihood:
Sending ETH via transfer
Description
transfer: This was once the simplest and safest way to send Ether, as it automatically reverts the transaction if the call fails. However, it is better to sent ETH via call specially if the receiver is smart contract or smart wallet.
Risk
transfer only forwards a fixed amount of gas (2300), which may not be enough for more complex operations in the receiving contract/wallet. This limitation has led to transfer being considered less safe, as it can lead to unexpected behavior if the receiving contract's fallback function consumes more than 2300 gas.
Recommended Mitigation
function withdraw(address target) external onlyOwner {
(bool success, ) = payable(target).call{value: address(this).balance}("");
require(success, "Transfer failed");
}
Rewards breakdown
nSLOC
234This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.