You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Nov 26, 2023. It is now read-only.
sherlock-admin opened this issue
May 24, 2023
· 0 comments
Labels
DuplicateA valid issue that is a duplicate of an issue with `Has Duplicates` labelMediumA valid Medium severity issueRewardA payout will be made for this issue
There isn't any redeem function in the code, so user will not be able to redeem is collateral back and will be stuck with the USSD tokes forever
Vulnerability Detail
The code does not include a redeem function, which means there is no mechanism for users to convert or redeem their USSD tokens back into the underlying collateral or any other form of value. This limitation can result in users being unable to liquidate or utilize their USSD tokens, effectively trapping their funds within the token indefinitely.
Impact
1): Loss of funds for the User.
2): Reputation loss for the protocol
Sign up for freeto subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Labels
DuplicateA valid issue that is a duplicate of an issue with `Has Duplicates` labelMediumA valid Medium severity issueRewardA payout will be made for this issue
BugBusters
high
There isn't any redeem function in the code
Summary
There isn't any
redeem
function in the code, so user will not be able to redeem is collateral back and will be stuck with the USSD tokes foreverVulnerability Detail
The code does not include a redeem function, which means there is no mechanism for users to convert or redeem their USSD tokens back into the underlying collateral or any other form of value. This limitation can result in users being unable to liquidate or utilize their USSD tokens, effectively trapping their funds within the token indefinitely.
Impact
1): Loss of funds for the User.
2): Reputation loss for the protocol
Code Snippet
https://github.com/sherlock-audit/2023-05-USSD/blob/main/ussd-contracts/contracts/USSD.sol
https://github.com/sherlock-audit/2023-05-USSD/blob/main/ussd-contracts/contracts/USSD.sol#L2
Tool used
Manual Review
Recommendation
Add redeem function through which user will be able to get their underlying tokens back
Duplicate of #958
The text was updated successfully, but these errors were encountered: