Submission Details
Severity:
check for zero address on `GatewayRouterMock :: outboundTransfer` when sending funds
Summary
check for zero address
Vulnerability Details
when you transfer funds to a zero address you can not retrieve them
Impact
funds can be lost and sent to wrong address
Tools Used
manual
Recommendations
check the _to address that is not zero
function outboundTransfer(
address _token,
address _to,
uint256 _amount,
uint256 _maxGas,
uint256 _gasPriceBid,
bytes calldata _data
) external payable returns (bytes memory) {
+ require(_to != address(0), "Address cannot be zero");
IERC20(_token).transferFrom(msg.sender, _to, _amount);
return abi.encode(_token, _to, _amount, _maxGas, _gasPriceBid, _data);
}
Updates
Prize pool breakdown
Total prize
22,500 USDC
nSLOC
1,05421 USDC / LOC
20,000 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.