Skip to content
Request an audit

‹ All findings

Halted withdrawals in BatchOut due to setting withdrawTo to address(0) in scheduleWithdrawal()

Crit/HighClip Finance Strategies·Three Sigma · DeFi infrastructure · 10th November, 20233S-Clip Finance-H06

ReportSource

Description

BatchOut:scheduleWithdraw() allows sending a withdrawTo argument of 0. Some tokens, such as USDT, revert when transferring tokens to address 0.

This means that, when fulfilling withdrawals, the loop will be DoSed when it reaches the 0 address withdrawal, halting all withdrawals in the cycle.

Recommendation

Do not allow 0 address withdrawTo.

Status

Addressed in #4dc4687