Submission Details
Severity:
Missing checks for `address(0)` when assigning values to address state variables
Summary
Missing checks for address(0) when assigning values to address state variables
Vulnerability Details
Missing checks for address(0) when assigning values to address state variables could lead to critical situations where funds could be burnt or owner permissions lost or even a DOS
File: /src/Escrow.sol
46: i_tokenContract = tokenContract;
49: i_arbiter = arbiter;
Impact
DOS, funds lost
Tools Used
Manual
Recommendations
Check if the new value is different than the address(0)
Prize pool breakdown
Total prize
40,000 USDC
nSLOC
186215 USDC / LOC
37,000 USDC
3,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.