DeFiHardhatFoundry
250,000 USDC
View results
Submission Details
Severity: low
Invalid

no check of constructor value in Diamond

Summary

constructor(address _contractOwner) {
    LibDiamond.setContractOwner(_contractOwner);

Lacks in constructor basic check the address value if not zero etc

Vulnerability Details

Can deploy crippled protocol and lost funds.

Impact

Losing ether, not knowing that Diamond proxy is not fully owned and operational.

Tools Used

slither, code review, forge

Recommendations

Do the checks of constructor data.
against address 0x0 and similar.

Updates

Lead Judging Commences

inallhonesty Lead Judge 12 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity
Assigned finding tags:

Informational/Gas

Invalid as per docs https://docs.codehawks.com/hawks-auditors/how-to-determine-a-finding-validity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.