Unhandled return values of `transfer` and `transferFrom`.md

1 - Unhandled return values of transfer and transferFrom

ERC20 implementations are not always consistent.

Some implementations of transfer and transferFrom could return ‘false’ on failure instead of reverting.

It is safer to wrap such calls into require() statements to these failures.

Recommendation:

Check the return value and revert on 0/false or use OpenZeppelin’s SafeERC20 wrapper functions

---

Slide Screenshot

---

Slide Text

• ConsenSys Audit Aave V2 Finding 5.4
• Error Handling
• Medium Severity
• transfer/transferFrom Return Values
• Use SafeERC20 Wrappers

---

References

• Youtube Reference
• Medium severity finding from Consensys Diligence Audit of Aave Protocol V2

---

Tags