Submission Details
Severity:
beneficier with address 0x0 can be added
Summary:
there is no point of being able to add 0x0 address as a beneficiery
Vulnerability Details
function test_addBeneficiaryMultipleTimes() public {
vm.deal(address(im), 10e18);
vm.startPrank(owner);
im.addBeneficiery(address(0x0));
im.addBeneficiery(address(0x0));
vm.warp(block.timestamp + 92 days);
im.inherit();
im.withdrawInheritedFunds(address(0));
vm.stopPrank();
console.log("get user1:", im._getBeneficiaryIndex(user1));
console.log("balance 0x0", address(0x0).balance);
}
Impact
potential permanent loss of fund. address 0x0 can be added as a test and then owner can forget about it. there is no easy way to check existing benficieries which does nto help.
Tools Used
Recommendations
there should be a check in
addBeneficiery` function for 0x0
Rewards breakdown
nSLOC
211This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.