In contract MErc20DelegateFixer, the repayBadDebtWithCash()
function can be called with argument amount = 0.
Calling the function with amount = 0 emits the event BadDebtRepayed(0)
, which means no debt has been payed at all. This is undesirable as introduces new information which really contributes nothing, the rest of the variables of the system are not affected.
Low impact as it does not affect the operation of the protocol.
Manual review
Add a check to prevent from calling the function with argument amount = 0:
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.