code-423n4 / 2021-05-yield-findings

0 stars 0 forks source link

no need for transferToPool to be payable #36

Open code423n4 opened 3 years ago

code423n4 commented 3 years ago

Handle

pauliax

Vulnerability details

Impact

function transferToPool is marked as 'payable'. It only transfers ERC20 tokens, no Ether, so there is no need in having 'payable' here.

Recommended Mitigation Steps

Remove 'payable' modifier from function transferToPool.

alcueca commented 3 years ago

True, thanks!