Skip to content
Request an audit

‹ All findings

Missing several safeERC20 functions

MediumBeraborrow Managed Dens·Sherlock · CDP stablecoin · 25th April, 2025M-7

Summary

Some tokens will not work currently due to not using safeERC20.

Vulnerability Detail

approve(), transferFrom() don't work for all tokens and safeERC20 should be used.

Impact

Protocol can't be used for certain tokens. Leaving as medium because vaults will be migrated and may have these tokens already with TVL.

Code Snippet

https://github.com/sherlock-audit/2025-04-beraborrow-vault-update/pull/1/files#diff-2d972f52027e0ba1065b2de2b424416244bfef9e2a79d2604e1687867f72c91eR523 https://github.com/sherlock-audit/2025-04-beraborrow-vault-update/pull/1/files#diff-2d972f52027e0ba1065b2de2b424416244bfef9e2a79d2604e1687867f72c91eR493 https://github.com/sherlock-audit/2025-04-beraborrow-vault-update/pull/1/files#diff-2d972f52027e0ba1065b2de2b424416244bfef9e2a79d2604e1687867f72c91eR939

Tool Used

Manual Review

Recommendation

Use the SafeERC20 lib.