Sparkn

CodeFox Inc.
DeFiFoundryProxy
15,000 USDC
View results
Submission Details
Severity: medium
Valid

The implementation address has not been verified for the null address (address(0)).

Summary

To mitigate potential risks of unexpected behaviors, it is crucial to validate critical constructor inputs that are addresses against address(0). Currently, there is a lack of address(0) validation for the address input in the following constructor:

constructor(address implementation) {
_implementation = implementation;
}

Impact

The _implementation address has the potential to be designated as address(0).

Tools Used

Manual code review

Recommendations

Please incorporate a verification checkpoint to ensure that the null address (0x0) is not accepted.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.