mediumLogic errorEVM-Solidity
Metrom: Fee-on-Transfer Tokens in `createCampaigns` Function cause revert in `_processRewardClaim`.
- Payout
- $0
- Protocol
- Metrom
- Disclosed
- May 20, 2024
- Source
- hats
Metrom's createCampaigns function books the full requested reward amount into internal accounting before pulling tokens from the caller, which is unsafe for fee-on-transfer ERC-20s. Because such tokens deliver less than the nominal transfer amount (amount minu …
Similar reports
- No close matches yet.
References
- https://github.com/hats-finance/Metrom-0xfdfc6d4ac5807d7460da20a3a1c0c84ef2b9c5a2/issues/1
- https://github.com/hats-finance/Metrom-0xfdfc6d4ac5807d7460da20a3a1c0c84ef2b9c5a2
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.