mediumReentrancyEVM-Solidity
Teller Lender Groups Update Audit: ERC20.approve Used Instead of Safe Approvals, Causing Pool Failures with Some ERC20s
- Payout
- $0
- Protocol
- Teller Lender Groups Update Audit
- Disclosed
- Dec 10, 2024
- Source
- sherlock
In Teller's LenderCommitmentGroup_Smart contract, the acceptFundsForAcceptBid function approves the TELLER_V2 contract to spend the principal token using a bare ERC20.approve call that assumes the token returns a boolean. On deployments holding tokens such as …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.