NEAR Protocol (NEAR)

🪲 FIND THE BUG ON A NEAR SMART CONTRACT

this is the core file of a real NEAR fungible token from 2022

a respected security firm audited it and found out it is missing something to ensure `ft`-related functions will work as they should

can you find it?

i'll reveal everything in 24 hours from now in this thread ↓
+ what's missing
+ what contract this is
+ what security firm found it
+ what the fixed code looks ...

---
comment if you want a ping when the answer is out!

🧑‍🏫 THE BUG EXPLAINED
*as @mihaikodo already found the right answer

this is @LinearProtocol's $LiNEAR token contract from 2022, audited by @BlockSecTeam

this finding went as a recommendation, named
"Missing check on the `prepaid_gas` in function `ft_transfer_call`"

the `prepaid_gas` should be checked to ensure it is enough for the target functions including `ft_on_transfer` and `ft_resolve_transfer`

current code already has the fix implemented, which is a `require!()` macro for the `env::prepaid_gas`

basically, it requires `ft_transfer_call` calls to have some prepaid gas attached that is checked against a minimum amount to make sure the entire transaction journey (with cross-contract calls) work flawlessly

this is important because if gas isn't enough, the contract's callbacks may fail later, which worsens the user experience and creates some security risks

now, everything is checked beforehand.
if prepaid_gas is too low, the contract will panic and more gas will be requested -- the transaction never

@mihaikodo @LinearProtocol @BlockSecTeam you can read the full report here:
https://t.co/fm5P43QQVa