fix(BaseERC20Guild-and-SnapshotERC20Guild): added checks to prevent u…

…sers withdrawing zero tokens, also added correspondig tests
DXgovernance · Jun 16, 2022 · 9332a60 · 9332a60
1 parent 54410e2
commit 9332a60
Show file tree

Hide file tree

Showing 4 changed files with 14 additions and 0 deletions.
diff --git a/contracts/erc20guild/BaseERC20Guild.sol b/contracts/erc20guild/BaseERC20Guild.sol
@@ -438,6 +438,7 @@ contract BaseERC20Guild {
     function withdrawTokens(uint256 tokenAmount) external virtual {
         require(votingPowerOf(msg.sender) >= tokenAmount, "ERC20Guild: Unable to withdraw more tokens than locked");
         require(tokensLocked[msg.sender].timestamp < block.timestamp, "ERC20Guild: Tokens still locked");
+        require(tokenAmount > 0, "ERC20Guild: amount of tokens to withdraw must be greater than 0");
         tokensLocked[msg.sender].amount = tokensLocked[msg.sender].amount.sub(tokenAmount);
         totalLocked = totalLocked.sub(tokenAmount);
         tokenVault.withdraw(msg.sender, tokenAmount);

diff --git a/contracts/erc20guild/implementations/SnapshotERC20Guild.sol b/contracts/erc20guild/implementations/SnapshotERC20Guild.sol
@@ -97,6 +97,7 @@ contract SnapshotERC20Guild is ERC20GuildUpgradeable {
             "SnapshotERC20Guild: Unable to withdraw more tokens than locked"
         );
         require(tokensLocked[msg.sender].timestamp < block.timestamp, "SnapshotERC20Guild: Tokens still locked");
+        require(tokenAmount > 0, "ERC20Guild: amount of tokens to withdraw must be greater than 0");
         _updateAccountSnapshot(msg.sender);
         _updateTotalSupplySnapshot();
         tokensLocked[msg.sender].amount = tokensLocked[msg.sender].amount.sub(tokenAmount);

diff --git a/test/erc20guild/ERC20Guild.js b/test/erc20guild/ERC20Guild.js
@@ -1290,6 +1290,12 @@ contract("ERC20Guild", function (accounts) {
         "ERC20: transfer amount exceeds balance"
       );
 
+      // Cannot withdraw zero tokens
+      await expectRevert(
+        erc20Guild.withdrawTokens(0, { from: accounts[1] }),
+        "ERC20Guild: amount of tokens to withdraw must be greater than 0"
+      );
+
       // try to release more than locked and fail
       await expectRevert(
         erc20Guild.withdrawTokens(50001, { from: accounts[1] }),

diff --git a/test/erc20guild/implementations/SnapshotERC2Guild.js b/test/erc20guild/implementations/SnapshotERC2Guild.js
@@ -198,6 +198,12 @@ contract("SnapshotERC20Guild", function (accounts) {
         "ERC20: transfer amount exceeds balance"
       );
 
+      // Cannot withdraw zero tokens
+      await expectRevert(
+        erc20Guild.withdrawTokens(0, { from: accounts[1] }),
+        "ERC20Guild: amount of tokens to withdraw must be greater than 0"
+      );
+
       // try to release more than locked and fail
       await expectRevert(
         erc20Guild.withdrawTokens(50001, { from: accounts[1] }),