Submission Details
Severity:
Missing checks for `address(0)` when assigning values to address state variables
Summary
In the changeOwner function, there is no verification for the zero address.
Vulnerability Details
Is possible to assigne address of the Protocol's owner to 0 address.
function changeOwner(address _newOwner) public {
owner = _newOwner;
}
Impact
It can break protocol.
Tools Used
aderyn
Recommendations
Check for address(0) when assigning values to address state variables.
error MysteryBox_ZeroAddress();
function changeOwner(address _newOwner) public {
require(address(0) != _newOwner, MysteryBox_ZeroAddress());
owner = _newOwner;
}
Rewards breakdown
nSLOC
86This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.