MorpheusAI

MorpheusAI
Foundry
22,500 USDC
View results
Submission Details
Severity: low
Invalid

Input Validation Missing in Setter Functions

Summary

Setter functions are utilized to update the state variables of a contract.
It is critical to ensure these functions have adequate input sanitization to prevent unwanted alterations or malicious attacks.
Without input validation, there's a potential risk of enabling vulnerabilities like overflow/underflow, unauthorized access, or insertion of invalid data.
Consider incorporating appropriate validation mechanisms, such as checking the range or type of inputs, to enhance the security of your contract.

Vulnerability Details

File: contracts/L1Sender.sol
/// @audit `setRewardTokenConfig` function does not validate `newConfig_` input
48: function setRewardTokenConfig(RewardTokenConfig calldata newConfig_) public onlyOwner {
File: contracts/L2MessageReceiver.sol
{
/// @audit `setParams` function does not validate `config_` input
25: function setParams(address rewardToken_, Config calldata config_) external onlyOwner {
Updates

Lead Judging Commences

inallhonesty Lead Judge over 1 year ago
Submission Judgement Published
Invalidated
Reason: Known issue

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.