Submission Details
Severity:
non-contract address can be pass
Summary
non-contract address can be pass in `FjordPoints:setStakingContract`
@> function setStakingContract(address _staking) external onlyOwner {
if (_staking == address(0)) {
revert InvalidAddress();
}
staking = _staking;
}
Recommendations
use check to see if the address is contract or not
+ if (_staking.code.length == 0) {
+ revert();
+}
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
66230 USDC / LOC
16,000 USDC
2,500 USDC
1,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.