Validation of 'to' in transferAndCall and transferWithPermit #350
Labels
1 (Low Risk)
Assets are not at risk. State handling, function incorrect as to spec, issues with comments
bug
Something isn't working
sponsor confirmed
Sponsor agrees this is a problem and intends to fix it (OK to use w/ "disagree with severity")
Handle
pauliax
Vulnerability details
Impact
In functions transferAndCall and transferWithPermit the condition should be AND, not OR:
Recommended Mitigation Steps
The text was updated successfully, but these errors were encountered: