The transferDeposits
function in the provided SiloFacet
facilitates the transfer of multiple deposits between addresses. However, it lacks a validation check for the recipient address, allowing the possibility of transferring deposits to the zero address. This oversight could lead to the loss of assets for the sender.
The absence of a recipient address validation check in the transferDeposits
function poses a critical risk. If a user unintentionally or maliciously provides the zero address as the recipient, all deposits from the sender's account may be lost, leading to irreversible consequences. This could result in financial losses for users and undermine the security and reliability of the protocol.
Recipient Address Validation:
Implement a check within the transferDeposits
function to ensure that the recipient address is not the zero address. This will prevent the accidental or intentional transfer of deposits to an invalid or unrecoverable destination.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.