Submission Details
Severity:
Missing Zero Address Check for Cost
Summary
setTreatCost() doesn't check for a zero address when setting the cost.
Vulnerability Details
Location: src/TrickOrTreat.sol:setTreatCost()
Impact
While unlikely, this could potentially lead to treats being set with invalid costs.
Tools Used
Recommendations
Add a zero address check before setting the cost.
Updates
Appeal created
bube 9 months ago
Submission Judgement Published Reason: Non-acceptable severity
Assigned finding tags:
[invalid] Zero treat cost
The cost of the treat is set only by the owner (in the constructor, in addTreat and in setTreatCost). That means the cost of the treat will always be greater than zero.
Rewards breakdown
nSLOC
109This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.