Uplift.

A reentrancy attack can occur when the contract creates a function that makes an external call to another untrusted contract before resolving any effects. If the attacker can control the untrusted contract, they can make a recursive call back to the original function, repeating interactions that would have otherwise not run after the external call resolved the effects. ### External call(s) ```solidity=109 IERC20(token).safeTransfer(account_, amountInBuyToken); ``` ### State variables written after the call(s) ```solidity=110 refundClaimedInBuyToken[token][identifier][account_] += amountInBuyToken; ``` --- ### External call(s) ```solidity=55 IERC20(token_).safeTransfer(msg.sender, availableForWithdrawInIDOTokens); ``` ### State variables written after the call(s) ```solidity=56 claimed[token_][identifier_][msg.sender] += availableForWithdrawInIDOTokens; ```

A reentrancy attack can occur when the contract creates a function that makes an external call to another untrusted contract before resolving any effects. If the attacker can control the untrusted contract, they can make a recursive call back to the original function, repeating interactions that would have otherwise not run after the external call resolved the effects. ### External call(s) ```solidity=109 IERC20(token).safeTransfer(account_, amountInBuyToken); ``` ### Events emitted after the call(s) ```solidity=112 emit ClaimRefund(msg.sender, token, identifier, account_, amountInBuyToken); ``` --- ### External call(s) ```solidity=91 uint256 refundAmountInToken = _calculateRefundAmountInToken( token_, identifier_, msg.sender, refundInToken_, percentInBP, KPIIndex_ ); ``` * This function call executes the following external call(s). * In `SafeERC20._callOptionalReturn`, * `returndata = address(token).functionCall(data,SafeERC20: low-level call failed)` * In `BaseRefundRequester._handleBroughtTokens`, * `IERC20(token_).safeTransferFrom(msg.sender,projectFundsHolder_,refundInToken_)` * In `Address.functionCallWithValue`, * `(success,returndata) = target.call{value: value}(data)` * This call sends Ether. ### Events emitted after the call(s) ```solidity=120 emit RequestRefund(token_, identifier_, msg.sender, refundAmountInToken, refundInToken_, KPIIndex_); ``` --- ### External call(s) ```solidity=55 IERC20(token_).safeTransfer(msg.sender, availableForWithdrawInIDOTokens); ``` ### Events emitted after the call(s) ```solidity=57 emit Withdraw(token_, identifier_, msg.sender, availableForWithdrawInIDOTokens); ```