Submission Details
Severity:
Missing checks for address 0 in initializer
The initializer lacks proper checks for address zero, which may pose security risks and lead to unexpected behavior in the system.
Impact
The absence of checks for address zero in the initializer could potentially result in security vulnerabilities or unexpected behavior, compromising the integrity of the system.
Recommendation
It is crucial to implement thorough validation for address zero in the initializer to mitigate potential security risks and ensure the stability and security of the system.
+error InvalidAddress();
function __SDLPoolBase_init(
string memory _name,
string memory _symbol,
address _sdlToken,
address _boostController
) public onlyInitializing {
+ if (_sdlToken == address(0) || _boostController == address(0)) {
+ revert InvalidAddress();
+ }
__RewardsPoolController_init();
name = _name;
symbol = _symbol;
sdlToken = IERC20Upgradeable(_sdlToken);
boostController = IBoostController(_boostController);
}
Prize pool breakdown
Total prize
27,500 USDC
nSLOC
1,41419 USDC / LOC
25,000 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.