Submission Details
Severity:
Lack of Zero Address Validation in `changeAdmin::CharityRegistry` Function
Description:
The changeAdmin::CharityRegistry function allows the current admin to set a new admin address without checking if the new address is the zero address (0x0000000000000000000000000000000000000000). This oversight can lead to loss of administrative control.
Impact:
Setting the admin to the zero address locks out all administrative functions, making the contract unusable.
Recommended Mitigation:
Add Zero Address Check:
function changeAdmin(address newAdmin) public {
require(msg.sender == admin, "Only admin can change admin");
require(newAdmin != address(0), "New admin cannot be zero address");
admin = newAdmin;
}
Rewards breakdown
nSLOC
67This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.