search

code-423n4 / 2022-05-rubicon-findings

5 stars 2 forks source link

Upgraded Q -> M from 408 [1656345785644] #513

Closed code423n4 closed 2 years ago

code423n4 commented 2 years ago

Judge has assessed an item in Issue #408 as Medium risk. The relevant finding follows:

HickupHH3 commented 2 years ago

[L02] Instead of call(), transfer() is used to withdraw ETH: To withdraw ETH, it uses transfer(), this transaction will fail inevitably when:

The withdrawer smart contract does not implement a payable function. Withdrawer smart contract does implement a payable fallback which uses more than 2300 gas unit. The withdrawer smart contract implements a payable fallback function that needs less than 2300 gas units but is called through proxy, raising the call’s gas usage above 2300.

dup of #82