Submission Details
Severity:
no check of constructor value in Diamond
Summary
constructor(address _contractOwner) {
LibDiamond.setContractOwner(_contractOwner);
Lacks in constructor basic check the address value if not zero etc
Vulnerability Details
Can deploy crippled protocol and lost funds.
Impact
Losing ether, not knowing that Diamond proxy is not fully owned and operational.
Tools Used
slither, code review, forge
Recommendations
Do the checks of constructor data.
against address 0x0 and similar.
Updates
Lead Judging Commences
inallhonesty 12 months ago
Submission Judgement Published Reason: Non-acceptable severity
Assigned finding tags:
Informational/Gas
Invalid as per docs https://docs.codehawks.com/hawks-auditors/how-to-determine-a-finding-validity
Prize pool breakdown
Total prize
250,000 USDC
nSLOC
12,28520 USDC / LOC
220,000 USDC
10,000 USDC
20,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.