Assessment reports>DojoSwap>Discussion>Composability

Composability

A user who bonds using CW20 send_from to send a message with the allowance of another account/contract will always be the sender in the call. As a result, it may be difficult to build on top of DojoSwap and take advantage of the bonding functionality if it has to be done through other contracts.

Here is a practical edge case: a fund-type contract that gives allowance to members and expects to safekeep all intermediary tokens will not receive the bond tokens if the operator is using send_from.

Zellic © 2024Back to top ↑