Submission Details
Severity:
Missing Contract-Existence Checks Before Low-Level Calls
Summary
When making low-level calls, it's crucial to ensure the existence of the contract at the specified address.
Vulnerability Details
If the contract doesn't exist at the given address, low-level calls will still return success, potentially causing errors in the code execution.
File: contracts/SmartVaultV3.sol
137: (bool sent,) = _to.call{value: _amount}("");
Tools Used
VSCode
Recommendations
Add check to verify that
.code.length > 0 before making low-level call.Updates
Lead Judging Commences
hrishibhat over 1 year ago
Submission Judgement Published Reason: Non-acceptable severity
Assigned finding tags:
informational/invalid
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
60933 USDC / LOC
17,500 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.