Submission Details
Severity:
Allowed to distribute to winner with 0 address
Summary
Possible fund loss if winner == address(0).
Vulnerability Details
When distributing tokens to winners the address of the winner is not checked to be non zero which could result in sending tokens to the 0 address if the token allows for transfers to the 0 address.
Impact
If a 0 address in the winners array was a mistake then the organizer could lose funds unnecessarily.
Tools Used
Manual
Recommendations
Check that the address of the winner is not 0 before transferring tokens and revert if it is.
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
19477 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.