Submission Details
Severity:
Missing address(0) check
Vulnerability Details
The Solidity contract lacks a check for address(0), which means there is no verification to prevent null or uninitialized addresses from being used. This oversight could result in unintended behaviors, potential vulnerabilities, or funds being sent to an invalid address, affecting the security and reliability of the contract.
Impact
Without an address(0) check, critical functions might inadvertently accept address(0) as a valid address. This could lead to loss of funds if tokens or ETH are accidentally sent to the zero address, as they would be irretrievable.
Tools Used
Manual
Recommendations
constructor(address _registry) ERC721("DonationReceipt", "DRC") {
+ require(_registery !=address(0))
registry = CharityRegistry(msg.sender);
owner = msg.sender;
tokenCounter = 0;
}
Rewards breakdown
nSLOC
67This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.