First Flight #9: Soulmate

Summary

The contracts were discovered to create new addresses without adequately verifying for zero addresses. Parameters related to address types must incorporate checks for zero addresses, or else the contract's functionality might become unreachable, leading to potential loss of tokens indefinitely. Depending on the contract's logic, such oversight could result in severe consequences, including loss of funds for users or contracts, or permanent loss of contract ownership.

Vulnerability Details

When setting up the Contracts and Interfaces address in constructor, the Contract lacks the zero address check.

Impact

Without proper validation, the contract's functionality may become inaccessible, leading to the risk of tokens being permanently locked or burned

Tools Used

manual

Recommendations

It is recommended to include proper validations for zero addresses when setting new addresses within the contract.