Sparkn

Summary

_distribute check for the lengths of arrays to be equals but there is no check that winners and percentage contains the right values expected

Vulnerability Details

for instance winners array could contain a zero address 0x0000000000000000000000000000000000000000, or percentages array could contain 0 value at any index.

Impact

risk of distributing token to the zero address, and also risk of distributing zero(0) token to a winner address

Tools Used

manual review

Recommendations

add additional checks to ensure that no winner is the zero address or no percentage is 0 .