[Lines of code](https://github.com/code-423n4/2023-07-basin/blob/main/mocks/tokens/MockToken.sol#L22&gt;, <https://github.com/code-423n4/2023-07-basin/blob/main/mocks/tokens/MockTokenFeeOnTransfer.sol#L27&gt;, <https://github.com/code-423n4/2023-07-basin/blob/main/src/Well.sol#L441)

Vulnerability details

Impact

_mint() is not recommended in favour of _safeMint(), which guarantees that the recipient is either an EOA.

#Proof of Concept,
<https://github.com/code-423n4/2023-07-basin/blob/main/mocks/tokens/MockTokenFeeOnTransfer.sol#L27&gt;, <https://github.com/code-423n4/2023-07-basin/blob/main/src/Well.sol#L441&gt;

Tools Used

Vscode
use _safeMint() instead of _mint().

Assessed type

Upgradable

The text was updated successfully, but these errors were encountered:

All reactions