Detect contracts lacking validations on asset id field of asset transfer transaction

crytic / tealer

Static Analyzer for Teal

GNU Affero General Public License v3.0

62 stars 14 forks source link

Detect contracts lacking validations on asset id field of asset transfer transaction #147

Open S3v3ru5 opened 1 year ago

S3v3ru5 commented 1 year ago

If a contract verifies that a certain transaction in the group is an "AssetTransfer" Then it should also check that the asset-id of the transaction is valid.

See building-secure-contracts/not-so-smart-contracts/algorand/asset_id_check