Assessment reports>WOOFI Stake>Threat Model>inCaseTokensGetStuck

Function: inCaseTokensGetStuck(address stuckToken)

This allows the owner to recover any token sent to the contract by mistake.

Inputs

  • stuckToken

    • Control: Fully controlled by the owner.

    • Constraints: Checked to be either native or some ERC-20 token.

    • Impact: The token to be recovered.

Branches and code coverage

Intended branches

  • Assume malicious intent on the behalf of the caller.

Negative behavior

  • Should not be callable by anyone other than the owner.

Zellic © 2024Back to top ↑