Submission Details
Severity:
Initializer missing `address(0)` Check before assignment
Summary
The initializer does not include a check for address(0) when initializing state variables that hold addresses.
Initializing a state variable with address(0) can lead to unintended behavior and vulnerabilities in the contract,
such as sending funds to an inaccessible address.
It is recommended to include a validation step to ensure that address parameters are not set to address(0).
Vulnerability Details
File: contracts/Distribution.sol
/// @audit `depositToken_` has lack of `address(0)` check before use
/// @audit `l1Sender_` has lack of `address(0)` check before use
53: function Distribution_init(
address depositToken_,
address l1Sender_,
Pool[] calldata poolsInfo_
) external initializer {
Updates
Prize pool breakdown
Total prize
22,500 USDC
nSLOC
1,05421 USDC / LOC
20,000 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.