search

tokamak-network / Tms-contract

GNU General Public License v3.0
0 stars 1 forks source link

import SafeERC20 but not using SafeERC20 #7

Closed zzooppii closed 2 months ago

zzooppii commented 2 months ago

Describe the bug SafeERC20 has been imported but is not being used.

Configuration

Impact Unsafe Tranfer

Recommendation https://github.com/tokamak-network/Tms-contract/blob/main/contracts/MultiSender.sol#L118

_token.transferFrom(msg.sender, _recipients[i], _amounts[i]);

//change
_token.safetransferFrom(msg.sender, _recipients[i], _amounts[i]);

Exploit Scenario

Demo