Closed code423n4 closed 3 years ago
Not valid.
It's subtle, but
_approve(sender, msg.sender, _allowances[sender][msg.sender] - amount);
contains the operation _allowances[sender][msg.sender] - amount
which will revert if there is no allowance in excess of amount, since the new v0.8
solidity contains built-in safemath.
While it is true that the transaction will revert, it will do so without a clear error message
duplicate of #20
Handle
a_delamo
Vulnerability details
Here you have more information: https://gist.github.com/alexon1234/1e1cdb16d364e7381aaba038afedc2f5