The SantaToken contract lacks zero address checks in critical functions. The constructor assigns the santasList parameter to the immutable i_santasList state variable without verifying that it is not the zero address, which could permanently lock the contract. Additionally, the mint function does not check if the to address is the zero address, potentially allowing tokens to be minted to an inaccessible address.
The contest is live. Earn rewards by submitting a finding.
Submissions are being reviewed by our AI judge. Results will be available in a few minutes.
View all submissionsThe contest is complete and the rewards are being distributed.