Skip to content

no sig airdrop for eth

GitHub Advanced Security / Slither succeeded Mar 21, 2024 in 6s

8 new alerts including 1 medium severity security vulnerability

New alerts in code changed by this pull request

Security Alerts:

  • 1 medium
  • 4 low

Other Alerts:

  • 3 warnings

See annotations below for details.

View all branch alerts.

Annotations

Check notice on line 174 in contracts/prebuilts/unaudited/airdrop/Airdrop.sol

See this annotation in the file changed.

Check failure on line 42 in contracts/prebuilts/unaudited/airdrop/Airdrop.sol

See this annotation in the file changed.

Check notice on line 250 in contracts/prebuilts/unaudited/airdrop/Airdrop.sol

See this annotation in the file changed.

Check notice on line 279 in contracts/prebuilts/unaudited/airdrop/Airdrop.sol

See this annotation in the file changed.

Check notice on line 194 in contracts/prebuilts/unaudited/airdrop/Airdrop.sol

See this annotation in the file changed.

Check failure on line 161 in contracts/prebuilts/unaudited/airdrop/Airdrop.sol

See this annotation in the file changed.

Code scanning / Slither

Functions that send Ether to arbitrary destinations High

Airdrop.airdrop20(address,Airdrop.AirdropContent20[]) sends eth to arbitrary user
Dangerous calls:
- (success) = _contents[i].recipient.call{value: _contents[i].amount}()

Check warning on line 133 in contracts/prebuilts/unaudited/airdrop/Airdrop.sol

See this annotation in the file changed.

Code scanning / Slither

Uninitialized local variables Medium

Airdrop.airdrop20(address,Airdrop.AirdropContent20[]).nativeTokenAmount is a local variable never initialized

Check notice on line 161 in contracts/prebuilts/unaudited/airdrop/Airdrop.sol

See this annotation in the file changed.

Code scanning / Slither

Calls inside a loop Low

Airdrop.airdrop20(address,Airdrop.AirdropContent20[]) has external calls inside a loop: (success) = _contents[i].recipient.call{value: _contents[i].amount}()

Check warning on line 161 in contracts/prebuilts/unaudited/airdrop/Airdrop.sol

See this annotation in the file changed.

Check warning on line 311 in contracts/prebuilts/unaudited/airdrop/Airdrop.sol

See this annotation in the file changed.

Code scanning / Slither

Low-level calls Warning

Low level call in Airdrop.claim20(address,address,uint256,bytes32[]):
- (success) = _receiver.call{value: _quantity}()

Check warning on line 34 in contracts/prebuilts/unaudited/airdrop/Airdrop.sol

See this annotation in the file changed.

Code scanning / Slither

State variables that could be declared constant Warning

Airdrop.merkleRootETH should be constant