search

code-423n4 / 2021-09-bvecvx-findings

0 stars 0 forks source link

Validations #19

Open code423n4 opened 3 years ago

code423n4 commented 3 years ago

Handle

pauliax

Vulnerability details

Impact

Function rescueToken in CvxStakingProxy should validate that _to is not empty (0x0) so tokens will not be lost (burned). Function setStakingContract in CvxLocker should validate that _staking is not empty.

Recommended Mitigation Steps

Consider implementing suggested validations.