Description:Description\
in this function, the admin can recover any ERC20 token sent to the contract, except for the managed token (FENIX). the problem is in the if condition that checks if the token being recovered is the managed token or an allowed token. However, the error IncorrectRecoverToken() is raised after the tokens have already been sent, meaning the tokens are transferred before the error is triggered.
this can potentially result in unintended token transfers if an admin accidentally includes a token that should not be recoverable. Therefore, it's important to validate and carefully review the permissions and conditions for recovering ERC20 tokens to prevent unauthorized token transfers.
Github username: -- Twitter username: -- Submission hash (on-chain): 0x1295c20753753cc2f9aea1f2ff349d2e2962209d0b0835b8c7f3b05a082d2d30 Severity: medium
Description: Description\ in this function, the admin can recover any ERC20 token sent to the contract, except for the managed token (FENIX). the problem is in the if condition that checks if the token being recovered is the managed token or an allowed token. However, the error
IncorrectRecoverToken()
is raised after the tokens have already been sent, meaning the tokens are transferred before the error is triggered.this can potentially result in unintended token transfers if an admin accidentally includes a token that should not be recoverable. Therefore, it's important to validate and carefully review the permissions and conditions for recovering ERC20 tokens to prevent unauthorized token transfers.
CompoundVeFNXManagedNFTStrategyUpgradeable.sol