DittoETH

Ditto
DeFiFoundryOracle
55,000 USDC
View results
Submission Details
Severity: medium
Invalid

Apply Checks for zero address

Summary - Check for zero address should be applied after calling .getAddress().

Vulnerability Details- In functions _getRethContract(), getBaseCollateral() and depositEth() after calling function getAddress() address returned by this function is not checked for zero address.

Impact - In functions like depositEth() address returned by getaddress() is stored in variable rocketDepositPool and then value is deposited in this address which could result in value deposited in zero address.

Tools Used - Manually

Recommendations - apply require() to check for zero address on the return value of getaddress().

Updates

Lead Judging Commences

0xnevi Lead Judge
almost 2 years ago
0xnevi Lead Judge over 1 year ago
Submission Judgement Published
Invalidated
Reason: Zero address checks

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.