Platform: Code4rena
Start Date: 04/02/2022
Pot Size: $30,000 USDC
Total HM: 3
Participants: 37
Period: 3 days
Judge: leastwood
Id: 84
League: ETH
Rank: 15/37
Findings: 1
Award: $625.19
🌟 Selected for report: 0
🚀 Solo Findings: 0
The sweep function can send the tokens in the contract to the owner, and it says ' The contract transfers all tokenIn directly to saleRecipient during a sale so it's safe to sweep tokenIn ', but if the owner sets saleRecipient to address( this), the assumption will be broken, the owner can take out all tokenIn.
None
Check if input is address(this) when setting saleRecipient
#0 - GalloDaSballo
2022-02-14T13:51:48Z
Agree with the finding, we must protect the tokenIn
#1 - 0xleastwood
2022-03-14T11:44:15Z
Duplicate of #50
#2 - 0xleastwood
2022-03-16T12:55:27Z
Duplicate of #61