OrderBook

First Flight #43
Beginner FriendlySolidity
100 EXP
View results
Submission Details
Impact: medium
Likelihood: low
Invalid

🛡️Mishandling of Core Tokens (wet, wbtc, wsol, usdc), Can not retrieve if accidentally send them directly.

🛡️Mishandling of Core Tokens (wet, wbtc, wsol, usdc), Can not retrieve if accidentally send them directly.

Description

If someone directly send core tokens (weth, wbtc,wsol, usdc) , noone will be able to retrive the tokens as their is no way for anyone to claim the core tokens form the contract (emergencyFunWithdraw only allows non-core tokens), resulting in the tokens getting block forever in the contract.

Risk

Likelihood:

  • Reason 1: Someone accidentally sends core token to the contract instead of creating the sell order.

  • Reason 2: No way to retrive the core tokens form the contract that are not part of any order.

Impact:

  • Impact 1: User lossing his tokens without any opting to get them back.

  • Impact 2: Tokens locking it the contract forever resulting in them lost for ever form any transactions

Recommended Mitigation

  • Some mechanism for retrieving the core-tokens by owner to return them to appropriate user after verifying his claims.

Updates

Lead Judging Commences

yeahchibyke Lead Judge 4 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.