Submission Details
Severity:
REFUND_TO_ZERO_ADDRESS_POSSIBILITY
Summary
Vulnerability Details
In GMXVault ETH sent by GMX is refunded to _store.refundee. However it's not set in _store initialisation in GMXVault and _store.refundee is a zero address. Value of _store.refundee is set in GMXCompound.compound, GMXEmergency.emergencyPause and others however they can not be called and funds will be sent to the zero address
Impact
GMX refund lost
Tools Used
Recommendations
Initialise refundee with the store initialisation, add fallback refundee if _store.refundee is not set
Prize pool breakdown
Total prize
35,000 USDC
nSLOC
2,28915
USDC / LOC
33,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.