Submission Details
Severity:
Lack of Validation for Addresses in `KittyPool::constructor` function
Description: The constructor does not validate the addresses provided, which could lead to setting invalid or malicious addresses.
Impact: Invalid or malicious addresses could lead to loss of funds or other unexpected behavior.
Recommended Mitigation: Add validation checks to ensure that addresses are non-zero and valid.
constructor(address _meowntainer, address _euroPriceFeed, address aavePool) {
require(_meowntainer != address(0), "Invalid meowntainer address");
require(_euroPriceFeed != address(0), "Invalid euro price feed address");
require(aavePool != address(0), "Invalid aave pool address");
meowntainer = _meowntainer;
i_kittyCoin = new KittyCoin(address(this));
i_euroPriceFeed = _euroPriceFeed;
i_aavePool = aavePool;
}
Rewards breakdown
nSLOC
224This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.