Open rajatbeladiya opened 1 year ago
Don't specified Attack scenario
@rotcivegaf it's essential to understand that not every issue in a smart contract necessarily has an exploitable attack scenario. In this particular case, the bug I submitted causes the smart contract's functionality to cease working as intended, which is a significant problem on its own. let the committee decide.
Affected Smart Contracts:
cEther.sol Maximillion.sol#43
Severity:
Medium
Description:
The use of the deprecated transfer() function for an address will inevitably make the transaction fail when:
Affected Links
https://github.com/LodestarFinance/lodestar-protocol/blob/cfca1ae275d023a02198798bbcb24b2a1f646776/contracts/CEther.sol#L167
https://github.com/LodestarFinance/lodestar-protocol/blob/cfca1ae275d023a02198798bbcb24b2a1f646776/contracts/Maximillion.sol#L43
Recommendation:
Use
call()
instead oftransfer()