Submission Details
Severity:
Missing `address(0)` check in the `transferReward` function
Summary
The function allows users to send rewards to any address, including address(0) (the zero address), which could effectively "burn" the reward and make it unrecoverable.
Tools Used
Manual review
Recommendations
Ensure rewards are not transferred to address(0) by adding a validation check.
require(_to != address(0), "Invalid recipient address");
Rewards breakdown
nSLOC
86This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.