[LOW] L-3 changeFeeAddress has no zero-address check
changeFeeAddress has no zero-address check. An owner fat-finger (or a compromised setter call) burns all future fees to address(0) — unrecoverable.
Likelihood: Medium — admin mistake; single mis-typed address.
Impact: Low — protocol fees lost forever; round economics damaged.
n/a — direct consequence of the missing input validation.
Require a non-zero address.
The contest is live. Earn rewards by submitting a finding.
Submissions are being reviewed by our AI judge. Results will be available in a few minutes.
View all submissionsThe contest is complete and the rewards are being distributed.