code-423n4 / 2022-07-fractional-findings

0 stars 0 forks source link

QA Report #618

Open code423n4 opened 2 years ago

code423n4 commented 2 years ago

1. Unused receive() will lock Ether into contracts

The following contracts define a payable receive function but have no way of withdrawing or utilizing the sent Ether, resulting in Ether being locked in the contracts. If the intention is to use the Ether that functionality should be added to the function, otherwise it should revert.

There are 3 instances of this issue:

  1. Buyout.sol#L53
  2. Migration.sol#L63
  3. Vault.sol#L32