Submission Details
Severity:
Missing Zero Address Validation
The setCCIPController function in the SDLPool contract sets the ccipController address without validating that the provided address is not the zero address. Assigning the zero address could lead to unexpected behavior or loss of control over certain functionalities.
Problematic Code:
function setCCIPController(address _ccipController) external onlyOwner {
ccipController = _ccipController;
}
To prevent potential issues, add a check to ensure that _ccipController is not the zero address before setting it.
function setCCIPController(address _ccipController) external onlyOwner {
require(_ccipController != address(0), "CCIPController cannot be the zero address");
ccipController = _ccipController;
}
Prize pool breakdown
Total prize
27,500 USDC
nSLOC
1,41419 USDC / LOC
25,000 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.