kgothatso - `AvailBridge :: sendERC20` can revert transaction if receive address is a contract and cause a DOS attack

[sherlock-admin]

kgothatso

high

AvailBridge :: sendERC20 can revert transaction if receive address is a contract and cause a DOS attack

Summary

if sendERC20 sends eth to a contract address that does not accept eth the transaction will not sends the funds to to the recipient address

Vulnerability Detail

contract may not have a fallback function recipient and will revert

Impact

transaction will not send funds to

Code Snippet

https://github.com/sherlock-audit/2023-12-avail/blob/main/contracts/src/AvailBridge.sol#L383

Tool used

Manual Review

Recommendation

check if transaction failed before emit an event and use the funds as deposits from the same recipient

[sherlock-admin]

1 comment(s) were left on this issue during the judging contest.

takarez commented:

invalid because { invalid: admin set who the recipient would be}