Submission Details
Severity:
Missing zero address check while calling 'rescueTokens'
Summary
Missing zero check in the LendingPool rescueToken function does not implement a zero address check
Vulnerability Details
The rescueToken is missing a zero address check as seen here
function rescueToken(address tokenAddress, address recipient, uint256 amount) external onlyOwner {
require(tokenAddress != reserve.reserveRTokenAddress, "Cannot rescue RToken");
IERC20(tokenAddress).safeTransfer(recipient, amount);
}
Impact
Tokens that are meant for rescuing could be burnt accidentally
Tools Used
Manual Analysis
Recommendations
Implement a zero address check
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.