Submission Details
Severity:
No address(0) check
Summary
Zero address is not checked in the constructor of DSCEngine.sol
Vulnerability Details
Zero address can be set as dscAddress when the contract is being deployed
Impact
The mintDsc() and burnDsc() functions will not work as expected
Tools Used
Manual review
Recommendations
consider using the following.
constructor(address[] memory tokenAddresses, address[] memory priceFeedAddresses, address dscAddress) {
if (tokenAddresses.length != priceFeedAddresses.length) {
revert DSCEngine__TokenAddressesAndPriceFeedAddressesAmountsDontMatch();
}
if(dscAddress == address(0)){
revert DSCEngine__AddressZero();
}
// ...
}
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
23664 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.