code-423n4 / 2024-05-munchables-findings

3 stars 1 forks source link

There is no function to allowing users to unlock their remaining tokens(remainder). The unlock function does not allow users to withdraw their remaining tokens. #376

Closed howlbot-integration[bot] closed 5 months ago

howlbot-integration[bot] commented 5 months ago

Lines of code

https://github.com/code-423n4/2024-05-munchables/blob/main/src/managers/LockManager.sol#L401-L427

Vulnerability details

Impact

Users can't withdraw all of their tokens.

Proof of Concept

https://github.com/code-423n4/2024-05-munchables/blob/main/src/managers/LockManager.sol#L401-L427

Recommended Mitigation Steps

You should add a function that allows users to withdraw their remaining tokens.

Assessed type

Token-Transfer