Skip to content
medium Denial of Service SWC-132 CWE-697

Forced Ether Reception Breaking Balance Invariants

SAFE-0041 Denial of Service Checked automatically by the scanner
1

What goes wrong

Logic assumes address(this).balance equals tracked deposits, but selfdestruct or coinbase payments can force-send ETH, breaking strict-equality checks and bricking functions.

2

How to fix it

the pattern that is safe
require(totalDeposits <= address(this).balance); // tolerate forced ether
◆
Never rely on exact native balance equality.
3

Related vulnerabilities in Denial of Service

SAFE-0037DoS via Unexpected Revert in Loop / Push Payments high · Denial of Service SAFE-0038DoS via Unbounded Loop / Gas Exhaustion high · Denial of Service SAFE-0040Locked Ether / No Withdrawal Path high · Denial of Service SAFE-0080Out-of-Gas in Loop Causing Stuck Funds high · Denial of Service SAFE-0124Push-Payment DoS (Loop of External Transfers) high · Denial of Service SAFE-0039Gas Griefing via Subcall Gas Forwarding medium · Denial of Service SAFE-0098Insufficient Withdrawal / Pull Pattern Not Enforced medium · Denial of Service SAFE-0214Unbounded Batch Mint / Airdrop Loop medium · Denial of Service
← PreviousLocked Ether / No Withdrawal Path
Check your own contract for this

The SaferICO scanner runs 201 detectors over your Solidity source, SAFE-0041 among them. Paste an address or the source itself — a small per-scan fee, shown before you sign, or unlimited on any plan.

Run the scanner See how it is attacked Read the docs