Submission Details
Severity:
Missing address(0) checks in Ownable.sol
Vulnerability Details
The constructor() function lacks zero address checks on owner addresses, which could potentially lead to unintended consequences. If, by mistake, the zero address is set as a valid owner address, it could wrongly validate any invalid signature as a whitelisted address.
14: constructor(address _owner) {
15: owner = _owner;
16: emit OwnershipTransferred(address(0), _owner);
17: }
Tools Used
VSCode
Recommendations
It is crucial to include zero address checks for owner addresses to prevent the aforementioned issues.
constructor(address _owner) {
+ require(_owner != address(0), "address(0)")
owner = _owner;
emit OwnershipTransferred(address(0), _owner);
}
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.