# #44158 \[SC-Low] Dispatcher does not check if native transfers are successful **Submitted on Apr 17th 2025 at 12:01:36 UTC by @hgrano for** [**Audit Comp | Spectra Finance**](https://immunefi.com/audit-competition/audit-comp-spectra-finance) * **Report ID:** #44158 * **Report Type:** Smart Contract * **Report severity:** Low * **Target:** * **Impacts:** * Direct theft of any user funds, whether at-rest or in-motion, other than unclaimed yield ## Description ## Brief/Intro `Dispatcher` allows for native transfers but the call status is not checked i.e. if called on a contract which reverts, then the funds will be left in the `Router`. An attacker could then use the native transfer functionality to take the native tokens for themselves. ## Vulnerability Details On Dispatcher.sol:485, the `success` flag isn't checked. If the `recipient` is unable to handle the native transfer, then this will silently fail and the native token is left in the `Router`. This would generally be caused by user error, but regardless, an attacker/bot could notice the failed transfer and use the `TRANSFER_NATIVE` command to send the tokens to their own wallet. ## Impact Details The impact is potential permanent loss of funds as described above. ## References Dispatcher.sol:485 ## Proof of Concept ## Proof of Concept The issue could be exploited by an attacker through: 1. Creating a bot to monitor the mempool for transactions that may cause the native transfer to fail. 2. If a transaction is detected, backrun it, transferring the native token back to the attacker's wallet. --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://reports.immunefi.com/spectra-finance/44158-sc-low-dispatcher-does-not-check-if-native-transfers-are-successful.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.