Submission Details
Severity:
Missing input check
Summary
In the setFeeReceiver function any address can be given as an input for the _feeReceiver.
Vulnerability Details
This function can only be called by the owner of the contract, so this cannot be exploited, but the owner can mistakenly set the address of the feeReceiver to the zero address. That means all of the fees will go to the zero address which is means they will be lost forever.
Recommendations
Add a check to see if _feeReceiver is the zero address and revert if that is the case.
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.