LendingLedger.sol sends ETH instead of CANTO

Lines of code Vulnerability details Impact In the documentations for the contest it is clearly stated that LendingLedger contract is expected to send CANTO to the user when they call the claim function but in reality it transfers ETH. This could be problematic if the user is a contract that expec...

addInvestor() Does Not Check Availability of investors_supply

Handle Meta0xNull Vulnerability details Impact When add investor, addInvestor does not check how many tokens is available from investorssupply. The total tokens allocated for Investors could more than investorssupply. Possible Attack Scenario: 1. Attacker who have Admin Private key call addInvest...