oot2k - FootiumPrizeDistributor should use SafeERC20 functions

[sherlock-admin]

oot2k

medium

FootiumPrizeDistributor should use SafeERC20 functions

Summary

The claimERC20Prize() function of FootiumPrizeDistributor uses token.transfer to transfer tokens. This function can silently revert (USDT...) and not transfer any token, while still updating the totalERC20Claimed.
The user will now lose funds.

Vulnerability Detail

The claimERC20Prize() function of FootiumPrizeDistributor uses token.transfer can lead to wrong stored totalERC20Claimed.

Impact

Possible loss of funds for Prize Receiver.

Code Snippet

https://github.com/sherlock-audit/2023-04-footium/blob/main/footium-eth-shareable/contracts/FootiumPrizeDistributor.sol#L130

Tool used

Manual Review

Recommendation

We recommend using openzeppelin SafeTransfer functions.

Duplicate of #86