Submission Details
Severity:
Missing `zero` address check in `ChristmasDinner:changeHost` function.
Summary:
`ChristmasDinner::changeHost` function does not check weather the address is selected to become host is `zero` address ot not.
```javascript
@> function changeHost(address _newHost) external onlyHost {
if(!participant[_newHost]) {
revert OnlyParticipantsCanBeHost();
}
host = _newHost;
emit NewHost(host);
}
```
Impact:
All funds will stuck in contract.
Recommendations:
The check for zero address have to be added before changing the host.
```diff
function changeHost(address _newHost) external onlyHost {
+ if(_newHost == address(0)) {
+ revert();
+ }
if(!participant[_newHost]) {
revert OnlyParticipantsCanBeHost();
}
host = _newHost;
emit NewHost(host);
}
```
Rewards breakdown
nSLOC
129This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.