Submission Details
Severity:
Constructor missing zero address check for "i_kittyConnectOwner"
Summary
Constructor missing zero address check for "i_kittyConnectOwner" inside of "KittyConnect.sol".
Vulnerability Details
The missing zero address check is present, which means can instantiate the contract without specifying address and will lose ownership of the contract.
Impact
High, since owner will lose ownership of the contract, but likelihood of that happening is minimum, cause everyone watches what he deploys usually.
Tools Used
Manual review.
Recommendations
Have a code piece inside of the contract initialization similar to:
require(msg.sender != address(0), "Address 0 not allowed!");
Updates
Rewards breakdown
nSLOC
235This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.