Submission Details
Impact:
Likelihood:
Potential Reentrancy in Withdraw
Description
While the withdrawal function follows the checks-effects-interactions pattern and uses standard ERC20 transfers, it remains potentially vulnerable to reentrancy attacks if the token contract implements callback mechanisms or unusual transfer behavior.
function withdrawTokens(address token, address to, uint256 amount) external onlyOwner {
IERC20(token).transfer(to, amount);
emit TokensWithdrawn(to, token , amount);
}
Risk
Impact:
-
Low risk with standard ERC20 implementations
-
Potential issues with ERC777 or similar tokens
Recommended Mitigation
function withdrawTokens(address token, address to, uint256 amount) external onlyOwner {
+ // Consider reentrancy guard for extra safety
IERC20(token).transfer(to, amount);
emit TokensWithdrawn(to, token , amount);
}
Rewards breakdown
nSLOC
150This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.