Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Audit Fixes: QS-17 #44

Merged
merged 7 commits into from
Nov 30, 2023
Merged

Audit Fixes: QS-17 #44

merged 7 commits into from
Nov 30, 2023

Conversation

parv3213
Copy link
Member

@parv3213 parv3213 commented Nov 28, 2023

  • Utilizing OpenZeppelin version 4.9.3, which introduces Add SafeERC20.forceApprove() OpenZeppelin/openzeppelin-contracts#4067.
  • Replacing safeApprove with forceApprove in instances where we approve an amount to be utilized in the same transaction. Although forceApprove prevents a Denial-of-Service (DOS) attack if some dust amount was left.
  • OpenZeppelin version 5.0.0 has incorporated forceApprove within safeIncreaseAllowance itself, which might be cleaner code for us. However, we cannot use this version as it is not compatible with older USDs upgrades.
Screenshot 2023-11-29 at 4 34 38 PM

@parv3213 parv3213 self-assigned this Nov 28, 2023
@bayou020 bayou020 marked this pull request as ready for review November 28, 2023 08:10
@parv3213 parv3213 marked this pull request as draft November 28, 2023 11:58
@YashP16
Copy link
Contributor

YashP16 commented Nov 28, 2023

If the tests are passing and all the checks are merged can we merge this with the base branch
@parv3213

@parv3213 parv3213 changed the base branch from fix/using-safeIncreaseAllowance to dev November 29, 2023 10:57
@parv3213 parv3213 marked this pull request as ready for review November 29, 2023 11:06
@parv3213 parv3213 marked this pull request as draft November 29, 2023 11:06
@parv3213 parv3213 marked this pull request as ready for review November 29, 2023 11:11
@parv3213 parv3213 changed the title Use forceApprove to handle USDT approve Audit Fixes: QS-17 Nov 29, 2023
@TechnoGeek01 TechnoGeek01 self-requested a review November 29, 2023 14:43
@YashP16 YashP16 merged commit cba249c into dev Nov 30, 2023
Copy link

SPE-17

@YashP16 YashP16 deleted the fix/usdt-force-approve branch January 17, 2024 10:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants