Contracts are vulnerable to fee-on-transfer accounting-related issues

Lines of code 359, 448, 509, 530, 42, 797, 162 Vulnerability details The functions below transfer funds from the caller to the receiver via transferFrom, but do not ensure that the actual number of tokens received is the same as the input amount to the transfer. If the token is a fee-on-transfer...

OpenZeppelin Security Vulnerability

OpenZeppelin is a software application. A standard for secure blockchain applications. OpenZeppelin Contracts suffers from a security vulnerability that stems from subjecting users to unintentional duplicate operations, such as asset transfers...

Privilege Escalation

@openzeppelin/contracts is vulnerable to privilege escalation. The vulnerability exists due to the lack of sanitization of roles in the TimelockController function which allowed an actor with executor role to escalate privileges...