Merge pull request #430 from frangio/fix-unchecked-transfer

Use SafeERC20 to transfer tokens safely
OpenZeppelin · Sep 7, 2017 · 07b688a · 07b688a
2 parents 84be318 + 20187f2
commit 07b688a
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 3 deletions.
diff --git a/contracts/ownership/CanReclaimToken.sol b/contracts/ownership/CanReclaimToken.sol
@@ -2,6 +2,7 @@ pragma solidity ^0.4.11;
 
 import "./Ownable.sol";
 import "../token/ERC20Basic.sol";
+import "../token/SafeERC20.sol";
 
 /**
  * @title Contracts that should be able to recover tokens
@@ -10,14 +11,15 @@ import "../token/ERC20Basic.sol";
  * This will prevent any accidental loss of tokens.
  */
 contract CanReclaimToken is Ownable {
+  using SafeERC20 for ERC20Basic;
 
   /**
    * @dev Reclaim all ERC20Basic compatible tokens
    * @param token ERC20Basic The address of the token contract
    */
   function reclaimToken(ERC20Basic token) external onlyOwner {
     uint256 balance = token.balanceOf(this);
-    token.transfer(owner, balance);
+    token.safeTransfer(owner, balance);
   }
 
-}
+}
diff --git a/contracts/token/TokenTimelock.sol b/contracts/token/TokenTimelock.sol
@@ -2,13 +2,15 @@ pragma solidity ^0.4.11;
 
 
 import './ERC20Basic.sol';
+import "../token/SafeERC20.sol";
 
 /**
  * @title TokenTimelock
  * @dev TokenTimelock is a token holder contract that will allow a
  * beneficiary to extract the tokens after a given release time
  */
 contract TokenTimelock {
+  using SafeERC20 for ERC20Basic;
 
   // ERC20 basic token contract being held
   ERC20Basic token;
@@ -44,6 +46,6 @@ contract TokenTimelock {
     uint256 amount = token.balanceOf(this);
     require(amount > 0);
 
-    token.transfer(beneficiary, amount);
+    token.safeTransfer(beneficiary, amount);
   }
 }