Submission Details
Severity:
Missing contract-existence checks before low-level calls
Summary
Missing contract-existence checks before low-level calls
Vulnerability Details
Low-level calls return success if there is no code present at the specified address.
Impact
File: src/ProxyFactory.sol
/// @audit _distribute()
250: (bool success,) = proxy.call(data);
Tools Used
Personal bot
Recommendations
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
19477 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.