Summary

Lack of Validation for 'bridge' Address in withdrawalFee and unstakeFee Functions".

Vulnerability Details

The code does not perform any checks to validate if the 'bridge' address exists or if it's valid.

Impact

It could cause failed transactions and unexpected behavior, which could disrupt the normal operation of the contract and potentially lead to financial loss indirectly.

Tools Used

Manual

Recommendations

For improved security, the code needs to include a function modifier or a require statement to verify the 'bridge' address and its presence in the s.bridge mapping before executing the rest of the function. This step will guarantee operations are performed on valid data only, thus enhancing the contract's resilience.