Skip to content

Latest commit

 

History

History
27 lines (20 loc) · 647 Bytes

123.md

File metadata and controls

27 lines (20 loc) · 647 Bytes

Brief Vinyl Rat

medium

Add funds reciever, while interaction with blacklistable tokens

Summary

Add funds reciever, while interaction with blacklistable tokens

Vulnerability Detail

Impact

Add funds receiver, as an input. Otherwise in will be not possible to recover fund from a contract in case Owner will get blacklisted

Code Snippet

https://github.com/sherlock-audit/2024-04-alchemix/blob/main/v2-foundry/src/CrossChainCanonicalBase.sol#L202-L212

Tool used

Manual Review

Recommendation

function recoverERC20(
    address tokenAddress, 
+ address receiver,
   uint256 tokenAmount
) external onlyOwner {...