code-423n4 / 2021-07-sherlock-findings

0 stars 0 forks source link

ERC20 can accidentally burn tokens #118

Open code423n4 opened 3 years ago

code423n4 commented 3 years ago

Handle

cmichel

Vulnerability details

The SherXERC20.transfer/transferFrom actions allow transferring tokens to the zero address. This is usually prohibited to accidentally avoid "burning" tokens by sending them to an unrecoverable zero address.

Evert0x commented 3 years ago

Does it make more sense to include an extra burn() function? As removing the possibility to send to zero address removes the ability to burn.