Submission Details
Severity:
No check for address(0) for winners in _distribute() function
Summary
No check for address(0) for winners when you are distributing the rewards.
Vulnerability Details
For the winner's address, in the function _distribute(), there is no check for address(0).
Impact
If you send the rewards to the winners with address(0), causing loss of fund.
Tools Used
Manual review
Recommendations
Just put a check in the function _distribute() for winners address to not to be address(0), like this :
for (uint256 i; i < winners.length; ) {
if (winners[i] == address(0)) revert ;
unchecked {
++i;
}
}
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
19477 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.