Root + Impact

Description

• The event is defined as:

  event TokensWithdrawn(address indexed token, address indexed to, uint256 amount);

  But the function emits the event in the wrong parameter order:

  emit TokensWithdrawn(to, token, amount);

Risk

Likelihood:

• This code executes every time tokens are withdrawn. Any external indexer or monitoring system relying on this event will receive incorrect data.

Impact:

• Corrupted event logs

Proof of Concept

None required

Recommended Mitigation

Correct emission should be: