⬇ Download holy card: ·
Blessed transferFlaw, Third of the April Trinity
Patron of copy-pasted smart contracts, balance checks, and Solidity code reviewers.
Life
On 28 April 2018, after batchOverflow and proxyOverflow, PeckShield announced transferFlaw, another arithmetic flaw in the transfer functions of some ERC20 tokens. The script was the same: a calculation that didn't add up allowed moving tokens one did not own. In a single week the ecosystem learned that copied code carries the original's sins along with it.
Prayer
O Blessed transferFlaw, who completes the triptych of bad sums, let whoever copies a contract copy its checks as well. Amen.
How to celebrate
Celebrated by having contracts audited before launch and using safe arithmetic libraries.
Bad things come in threes, and the third one costs.