Submission Details
Severity:
No Winner Address(0) Check
Summary
No Address(0) check for Winners in the array
Vulnerability Details
winners array length is checked. However, the individual addresses are not checked for 0x00 address. This may cause loss of funds by sending tokens to Address(0)
Impact
Loss of Funds. Irrecoverable
Tools Used
Manual Review
Recommendations
Put a address(0) check inside the loop which is used to send tokens to the winner addresses. In Distributor.sol
for (uint256 i; i < winnersLength; ) {
if(winners[i]==address(0)){
revert Distributor__NoZeroAddress()();
}
//remaining logic
}
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
19477
USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.