code-423n4 / loopfi-bug-bounty

5 stars 6 forks source link

Malicious Input Handling in Claim Function #66

Closed c4-bot-9 closed 2 months ago

c4-bot-9 commented 3 months ago

Lines of code

https://github.com/LoopFi/loop-prelaunch-contracts/blob/c8b13474aa4f319eec368fc4827bf51eddad080f/src/PrelaunchPoints.sol#L417-L422

Vulnerability details

Description: The contract may not properly handle or validate malicious input in the claim function. Recommendation: Strengthen input validation and add more robust error handling for unexpected inputs.

c4-bot-2 commented 3 months ago

Discord id(s) for hunter(s): [object Object]

0xd4n1el commented 2 months ago

Please provide PoC, otherwise needs to be dismissed