The withdraw function uses payable(target).transfer(...) to send the contract's ETH balance to a specified target address. The transfer function forwards a fixed stipend of 2300 gas. If the target address is a smart contract with a receive or fallback function that consumes more than 2300 gas, the transfer will revert, causing a permanent Denial of Service for withdrawing funds.
The contest is live. Earn rewards by submitting a finding.
Submissions are being reviewed by our AI judge. Results will be available in a few minutes.
View all submissionsThe contest is complete and the rewards are being distributed.