mediumLogic errorEVM-Solidity
Sentiment V2: Super pool uses `ERC20.approve` instead of safe approvals, causing it to always revert on some ERC20s
- Payout
- $0
- Protocol
- Sentiment V2
- Disclosed
- Aug 24, 2024
- Source
- sherlock
Sentiment V2's contract factory used the raw IERC20.approve() call when funding newly deployed super pools, and SuperPool::reallocate did the same when moving assets between pools. Several widely-accepted tokens, most notably USDT on Ethereum mainnet, intentio …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.