Submission Details
Severity:
MysteryBox::changeOwner lacks a zero check
Summary :
In changeOwner the function changes the Owner without verifying if the new owner is a valid wich can drain the Box.
Vulnerability Details :
if the sender of the transaction send the box an invalid address, the box will be drained.
Impact :
If there's a mistake in the adress during the transfer the box could be drained or lost.
Recommendations :
add a cheker for the addres(0)
function changeOwner(address _newOwner) public {
if (_newOwner != address(0)) {
owner = _newOwner;
} else {
revert();
}
}
Rewards breakdown
nSLOC
86This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.