call() should be used instead of transfer() on an address payable #239
Labels
bug
Something isn't working
grade-c
QA (Quality Assurance)
Assets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntax
Lines of code
https://github.com/code-423n4/2022-10-holograph/blob/f8c2eae866280a1acfdc8a8352401ed031be1373/contracts/HolographOperator.sol#L596
Vulnerability details
The use of the deprecated transfer() function for an address will inevitably make the transaction fail when:
Additionally, using higher than 2300 gas might be mandatory for some multisig wallets.
Tools Used
Remix
Recommended Mitigation Steps
I recommend using call() instead of transfer()
The text was updated successfully, but these errors were encountered: