Deflationary (fee on transfer) / rebasing tokens are not supported. Because anyone can createPromotion with an arbitrary token, such tokens may be lost forever.
Recommended Mitigation Steps
Consider checking the actual amounts transferred (balance before/after) if you want to include such tokens in promotions.
Handle
pauliax
Vulnerability details
Impact
Deflationary (fee on transfer) / rebasing tokens are not supported. Because anyone can createPromotion with an arbitrary token, such tokens may be lost forever.
Recommended Mitigation Steps
Consider checking the actual amounts transferred (balance before/after) if you want to include such tokens in promotions.