40,000 USDC
View results
Submission Details
Severity: low

Missing check for `address(0)` when assigning values to `address` state variables

Summary

The code is not checking for address(0) when assigning a value to an address state variable.

Vulnerability Details

There is 1 instance of this issue.

File: src/Escrow.sol
49: i_arbiter = arbiter;
File Link Instance Count Instance Link
Escrow.sol 1 49

Impact

Lack of zero-address validation on address parameters may lead to transaction reverts, wastes gas, may require resubmission of transactions, and may force contract redeployments in certain cases within the protocol.

Tools Used

baudit: a custom static code analysis tool; manual review

Recommendations

Consider adding explicit zero-address validation prior to assignment of a value to an address state variable.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.