Submission Details
Severity:
Missing zero address check in YieldFacet
Vulnerability Details
Identifier: M-08
Description: No checks for
_dittonot being the zero address.
Code Snippet:
In YieldFacet.sol:31,
IAsset private immutable DITTO;
constructor(address _ditto) {
DITTO = IAsset(_ditto);
}
Impact
If the _ditto address provided to the constructor is the zero address, the smart contract would set its DITTO state variable to this invalid address. Any interactions or operations using this address can lead to unexpected behavior.
Tools Used
Manual Review
Recommendations
Add a validation check in the constructor to ensure that the _ditto address is not the zero address.
Prize pool breakdown
Total prize
55,000 USDC
nSLOC
3,36516 USDC / LOC
50,000 USDC
5,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.