20,000 USDC
View results
Submission Details
Severity: low
Valid

Missing checks for `address(0)` in the constructor of `Fees.sol` contract

Summary

The smart contract's constructor lacks checks for address(0), which could lead to potential security vulnerabilities.

Vulnerability Details

The constructor of the smart contract does not include proper checks to prevent the use of address(0) (the zero address). This omission may enable certain operations or actions that could be exploited by attackers, potentially leading to unexpected behavior or loss of funds.

Code Snippet

File: Fees.sol
19: constructor(address _weth, address _staking) {
20: WETH = _weth;
21: staking = _staking;
22: }

Impact

The absence of checks for address(0) in the constructor opens up possibilities for malicious actors to interact with the contract in unintended ways. It might enable unauthorized operations or cause disruptions, making the contract susceptible to various attack vectors.

Tools Used

Manual Review

Recommendations

Ensure that the constructor includes proper checks to disallow the use of the zero address.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.