Unchecked low level call

[c4-bot-5]

Lines of code

https://github.com/code-423n4/2024-01-decent/blob/main/src/UTBExecutor.sol#L67
https://github.com/code-423n4/2024-01-decent/blob/main/src/UTBExecutor.sol#L54

Vulnerability details

Impact

This is a well-known issue but has not been listed in Automated findings [1],[2].
The call/delegatecall function returns a boolean value indicating whether the call was successful. However, it is important to note that this return value is not being checked in the current implementation.

As a result, there is a possibility that the call wasn't successful, while the transaction continues without reverting.
refund may lose their extraNative and amount.

Proof of Concept

https://github.com/code-423n4/2024-01-decent/blob/main/src/UTBExecutor.sol#L54
https://github.com/code-423n4/2024-01-decent/blob/main/src/UTBExecutor.sol#L67

Tools Used

Recommended Mitigation Steps

check return value

Assessed type

call/delegatecall

[c4-pre-sort]

raymondfam marked the issue as insufficient quality report

[c4-pre-sort]

raymondfam marked the issue as duplicate of #25

[c4-judge]

alex-ppg marked the issue as unsatisfactory:
Invalid