20,000 USDC
View results
Submission Details
Severity: low
Valid

Missing checks for address(0) when updating feeReceiver address variable

Summary

The absence of a critical check for zero' address(0) in the setFeeReceiver function. This function is used to update the feeReceiver state variable, which determines the recipient of fees within the smart contract's operations.

Vulnerability Details

In the setFeeReceiver function, the contract owner is able to update the feeReceiver variable with a new address. However, the function lacks a check for the zero address(0). The missing check exposes the contract to a risk where the fees could be irreversibly directed to the zero address, effectively fees getting lost.

Impact

If the feeReceiver is set to the zero address, any fees directed to this address would be lost.

Tools Used

  1. VS Code

  2. Manual Review

Recommendations

Consider adding a check within the setFeeReceiver function to ensure the _feeReceiver address is not the zero address.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.