Submission Details
Severity:
changeOwner() does not check if address provided is zero address
Summary
changeOwner() does not check if the address provided is a zero address. Thus, all Ether on the contract can be blocked.
Vulnerability Details
It's better to check if the address provided is not the zero address when changing the owner
Impact
All ether can be blocked on the contract
Recommendations
Check that the owner address provided is not the zero address
function changeOwner(address _newOwner) public {
+ require(_newOwner != address(0), "Please input a valid address");
owner = _newOwner;
}
Rewards breakdown
nSLOC
86This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.