Skip to content
Request an audit

‹ Findings database

Codebase is not using SafeERC20

Low/InfoMetaZero Staking audit·Three Sigma·Omnichain RWA tokenisation·6th April, 20243S-MZ-N05

Description

The codebase is using transferFrom() and transfer() which revert for weird ERC20 tokens. It should not happen as the MetaZero token implements the standard correctly.

Recommendation

Use SafeERC20::safeTransferFrom() and SafeERC20::safeTransfer() instead.

Status

Acknowledged

Source

Disclosed by 0xSimao · Sherlock's 2025 Watson of the Year · 21 first places in 57 audit contests