MorpheusAI

Summary

"catch" can crash and fail to catch an error if address(0) is being called

Vulnerability Details

There is an issue with try/catch in solidity. If non-existence address is being called in a "try" block, "catch" would fail to catch it and it will crash.
See: https://github.com/ethereum/solidity/issues/13869

In blockingLzReceive function, there is no check if zero addresss is passed as "senderAndReceiverAddresses".

Impact

If zero address is passed, the "catch" block won't catch the error and it would crash.

Tools Used

Manual review

Recommendations

If possible, check for address(0).