15,000 USDC
Submission Details
Severity:
Missing Zero Address check in `sweepAll()` function of `MErc20DelegateMadFixer.sol` Contract
Summary
Missing Zero Address check may lead to lost of All tokens .
Vulnerability Details
function sweepAll(address sweeper) external {
/// @dev checks
require(msg.sender == admin, "only admin may sweep all");
EIP20Interface token = EIP20Interface(underlying);
/// @dev take it, take it all
bool success = token.transfer(sweeper, token.balanceOf(address(this)));
require(success, "token sweep failed");
}
Impact
Medium
Tools Used
Manual Review
Recommendations
+ require(sweeper != address(0) , "zero address not allowed");
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
39438 USDC / LOC
14,000 USDC
1,000 USDC
1,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.