15,000 USDC
Submission Details
Severity:
`MErc20DelegateMadFixer::sweepAll()` - L14: In an otherwise perfect function, lack of address(0) check for parameter `sweeper`.
LOW:
MErc20DelegateMadFixer::sweepAll()- L14: In an otherwise perfect function, lack of address(0) check for parametersweeper.
There seems to be no zero address checks anywhere down the call-train for the sweepAll() function for parameter sweeper.
Impact:
could accidentally send all the underlying tokens to be burned, instead of being sent to the community multisig.
could potentially impact internal accounting, purely because tokens are supposed to go to the multisig first, instead of being burnt immediately.
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
39438 USDC / LOC
14,000 USDC
1,000 USDC
1,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.