stake.link

stake.link
DeFiHardhatBridge
27,500 USDC
View results
Submission Details
Severity: low
Invalid

Lack of 0 address check in constructor

Summary

Lack of address (0) check in constructor

Vulnerability Details

Constructor does not have check for address (0) that can lead to accidently setting address to 0x00.

Impact

Setting address (0) will lead to unexpected behavior like loss of control over all owner based function.

Tools Used

Manual code Review

Recommendations

Check effect interaction pattern should be followed and require condition should be placed inside constructor for contracts of RewardsInitiator, SDLPoolCCIPController, RESDLTokenBridge and SDLPoolCCIPControllerSecondary.

require(address != address (0), address should not be zero);
Updates

Lead Judging Commences

0kage Lead Judge almost 2 years ago
Submission Judgement Published
Invalidated
Reason: Known issue

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.