Submission Details
Severity:
Wrong address in the deploy script
Summary
The Deploy::run function uses a hardcoded adress which is different from the stored in Deploy::s_zkSyncUSDC.
Vulnerability Details
Line 18 of Deploy.s.sol contains IERC20(0x1d17CBcF0D6D143135aE902365D2E5e2A16538D4).transfer(address(airdrop), s_amountToAirdrop);. This address is not the same as the one in Line 8: address public s_zkSyncUSDC = 0x1D17CbCf0D6d143135be902365d2e5E2a16538d4;.
Impact
Funds will not be transferred to the airdrop.
Tools Used
Manual Review
Recommendations
Do not use hardcoded addresses. Replace the address in Line 18 with s_zkSyncUSDC.
Updates
Lead Judging Commences
inallhonesty over 1 year ago
Submission Judgement Published Assigned finding tags:
usdc-wrong-address
Rewards breakdown
nSLOC
62This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.