Submission Details
Severity:
Lack of check of address zero in the constructor
Description:
During the deployment of contract, there is no constructor there is no check for inputed token addresses.
Impact:
If address zero is passed, other than intended ones then it would disrupt the functionality of protocol.
Recommended Mitigation:
constructor(address _WBTC, address _WETH, address _USDC) {
host = msg.sender;
require(_WBTC != address(0) && _WETH != address(0) && _USDC != address(0));
...
}
Rewards breakdown
nSLOC
129This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.