tokencard/contracts

Licence contract's load() function will execute `transferFrom` on an arbitrary contract

Closed this issue · 1 comments

draganm commented

Licence contract is not checking if the assed that is being loaded is supported and will execute transferFrom on any contract address passed as argument.
We should introduce a check by consulting token whitelist before transferring ERC20

i-stam commented

duplicate of #547