medium10 pts · first answer countssmart-contract-securitytokensinput-validation
A deposit of a token that does not exist
A vault uses a low-level call to token.transferFrom and only checks the success flag. An attacker passes an address with no code as the token. What happens?
Discussion 0
Join free to post in the discussion.
Related questions
- Letting a contract spend tokensBlockchain Developer
- Standard for unique tokensBlockchain Developer
- Private variables are public dataBlockchain Developer
- Verifying a contract on EtherscanBlockchain Developer
- Sharing a seed phraseBlockchain Developer
- Why use OpenZeppelinBlockchain Developer
- The checks-effects-interactions orderBlockchain Developer
- What nonReentrant doesBlockchain Developer