Skip to content

Latest commit

 

History

History
29 lines (15 loc) · 986 Bytes

050.md

File metadata and controls

29 lines (15 loc) · 986 Bytes

moneyversed

high

Lack of reentrancy guard in CollateralEscrowV1

Summary

The CollateralEscrowV1 contract does not have a reentrancy guard in place, potentially leading to reentrancy attacks when interacting with external contracts or tokens.

Vulnerability Detail

In the CollateralEscrowV1.sol contract, there is no reentrancy guard to protect against potential reentrancy attacks when interacting with external contracts or tokens. This could lead to unintended behavior or vulnerabilities.

Impact

Potential reentrancy attacks, leading to unintended behavior or vulnerabilities.

Code Snippet

https://github.com/sherlock-audit/2023-03-teller/blob/main/teller-protocol-v2/packages/contracts/contracts/escrow/CollateralEscrowV1.sol#L1

Tool used

Manual Review

Recommendation

Add a reentrancy guard, such as the ReentrancyGuard from the OpenZeppelin library, to protect against potential reentrancy attacks when interacting with external contracts or tokens.