First Flight #20: The Predicter

Summary

Vulnerability Details

The setThePredicter() function in ScoreBoard.sol lacks a check for a zero address, allowing the possibility of setting an invalid address as the predicter. This can lead to unintended consequences and potential vulnerabilities within the protocol.

Impact

Without a zero address check, an invalid address can be assigned as the predictor, leading to erroneous behavior in the protocol.

Tools Used

Manual

Recommendations

require(_thePredicter != address(0), "Invalid Address")