mediumLogic errorEVM-Solidity
Notional Update #5: recover() using the standard transfer may not be able to retrieve some tokens
- Payout
- $0
- Protocol
- Notional Update #5
- Disclosed
- Jan 18, 2024
- Source
- sherlock
Notional's SecondaryRewarder exposes an onlyOwner-guarded recover() used to sweep tokens sent to the contract or leftover reward tokens back to the owner. For non-ETH tokens the function invokes the standard IERC20.transfer(), which reverts for tokens such as …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.