Submission Details
Severity:
Missing contract-existence checks before low-level calls
Summary
[L-04] Missing contract-existence checks before low-level calls
Low-level calls return success if there is no code present at the specified address. In addition to the zero-address checks, add a check to verify that
.code.length > 0file: /src/ProxyFactory.sol
250 (bool success,) = proxy.call(data);
https://github.com/Cyfrin/2023-08-sparkn/blob/main/src/ProxyFactory.sol#L250
file: /src/Distributor.sol
139 uint256 totalAmount = erc20.balanceOf(address(this));
https://github.com/Cyfrin/2023-08-sparkn/blob/main/src/Distributor.sol#L139
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
19477 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.