Submission Details
Severity:
Missing checks for zero address when assigning values to address state variables
Summary
Missing checks for zero address when assigning values to address state variables
Vulnerability Details
If admin calls CharityRegistry::changeAdmin(address newAdmin)without specifying the newAdmin, ownership of CharityRegistry contract will be lost.
Impact
Tools Used
Manual review
Recommendations
Add checks that if the address is zero.
function changeAdmin(address newAdmin) public {
+ require(newAdmin != address(0), "Invalid newAdmin address");
require(msg.sender == admin, "Only admin can change admin");
admin = newAdmin;
}
Rewards breakdown
nSLOC
67This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.