Flow
Sablier
FoundryDeFi
20,000 USDC
View results
Previous Next
Submission Details
Severity: medium
Invalid

Missing Validation in transferAdmin Function

asar

Vulnerability Details

The transferAdmin function lacks a check to prevent the assignment of address(0) as the new admin. Allowing address(0) as the admin would result in an inaccessible role, effectively locking out all admin-only functions.

Impact

The ability to set address(0) as the admin poses a significant risk of accidental contract inaccessibility, potentially rendering the contract useless. Such a mistake could cause downtime or loss of control if not corrected immediately.

Tools Used

Manual analysis

Recommendations

Add a check to validate the new admin address. Implementing a condition like the following would prevent the assignment of address(0):

require(newAdmin != address(0), "Admin address cannot be zero.");
Updates

Lead Judging Commences

inallhonesty Lead Judge 9 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.