Submission Details
Severity:
Lack of address(0) check can cause to lose funds forever.
Vulnerability Details
In the constructor of the contract Fees, the _staking is set to staking without checking it for address(0).
Impact
If the staking is set to address(0) and the Fees contract has some balance, It can be lost to address(0) if the public function sellProfits() is called.
Tools Used
Manual Analysis
Recommendations
Check _staking for address(0) before setting it in to staking in the constructor.
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.