Lines of code

Vulnerability details

Impact

When recipient not able to received reward when call withdraw, as natspec: If contract is using proxy pattern, it’s possible to register retroactively, however past fees will be lost.
We not handle that case to get locked funds back. We should add withdrawForOwner() to release locked funds.

#Proof of Concept

Recommended Mitigation Steps

error TransferError();
function withdrawForOwner(uint256 amount) external onlyOwner {
(bool success, ) = payable(msg.sender).call{value: amount}(‘’);
if (!success) revert TransferError();
}

The text was updated successfully, but these errors were encountered:

All reactions