Impact

Setting organizer = address(0) causes all functions restricted by the onlyOrganizer modifier to become temporarily inaccessible. Until the owner manually sets a valid organizer address again

Description

Under normal operation, the contract owner sets a valid organizer address responsible for managing key functionalities such as configuring passes, creating performances, and managing memorabilia collections.

However, the setOrganizer function lacks validation against the zero address (address(0)). This allows the owner to mistakenly or maliciously set the organizer to the zero address. As a result, all functions protected by the onlyOrganizer modifier become temporarily inaccessible until a valid organizer address is assigned again. This leads to disruption of critical contract operations and potential denial of service for users relying on these features

Risk

Likelihood:

The contract owner may accidentally set the organizer address to zero when updating it without input validation

Impact:

Critical organizer-only functions such as configuring passes, creating performances, and managing memorabilia collections become inaccessible.

Proof of Concept

Recommended Mitigation