Submission Details
Severity:
`PoolFactory::constructor` lacking zero address check for the `i_wethToken`
Description: Upon deploying PoolFactory contract there is lack of zero address check in the constuctor for the parameter of i_wethToken.
Impact: Can hinder protocol functionality
Proof of Concept:
function testLackZeroAddressCheck() public {
PoolFactory dummyFactory = new PoolFactory(address(address(0)));
assert(dummyFactory.getWethToken() == address(0));
}
Recommended Mitigation:
constructor(address wethToken) {
+ if(wethToken == address(0)) {
+ revert();
+ }
i_wethToken = wethToken;
}
Rewards breakdown
nSLOC
276This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.