Submission Details
Severity:
wethToken lack zero address check
Summary
The factory need to check if the provided weth token address is not zero
Vulnerability Details
In PoolFactory.constructor
constructor(address wethToken) {
i_wethToken = wethToken;
}
Impact
A human mistake can cause the factory to create invalid pools that will lock user's tokens.
Tools Used
Slither
Recommendations
constructor(address wethToken) {
require(wethToken != address(0));
i_wethToken = wethToken;
}
Rewards breakdown
nSLOC
276This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.