Skip to content

Insufficient Withdrawal / Pull Pattern Not Enforced

SAFE-0098 Denial of Service Checked automatically by the scanner
1

What goes wrong

Funds owed to many users are only releasable via a push mechanism; a single failing recipient or gas limit prevents others from being paid. The secure pull pattern is absent.

2

How to fix it

the pattern that is safe
mapping(address=>uint) public credit;
function withdraw() external nonReentrant { uint a=credit[msg.sender]; credit[msg.sender]=0; _send(a); }
Implement the pull-payment pattern.
Check your own contract for this

The SaferICO scanner runs 201 detectors over your Solidity source, SAFE-0098 among them. Paste an address or the source itself — a small per-scan fee, shown before you sign, or unlimited on any plan.

Run the scanner See how it is attacked Read the docs