Judge has assessed an item in Issue #187 as High risk. The relevant finding follows:
1. rescueETH() cannot rescue Ether
rescueETH() sends msg.value to the destination address, which means it requires the caller of rescueETH() to provide the Ether to send. Essentially the owner is directly paying the destination address, and the Ether in the contract remains untouched
Judge has assessed an item in Issue #187 as High risk. The relevant finding follows:
1.
rescueETH()
cannot rescue EtherrescueETH()
sendsmsg.value
to thedestination
address, which means it requires the caller ofrescueETH()
to provide the Ether to send. Essentially the owner is directly paying thedestination
address, and the Ether in the contract remains untouchedThere is 1 instance of this issue:
https://github.com/code-423n4/2022-06-infinity/blob/765376fa238bbccd8b1e2e12897c91098c7e5ac6/contracts/staking/InfinityStaker.sol#L345-L348