search

code-423n4 / 2021-09-yaxis-findings

0 stars 0 forks source link

Add non-zero address checks. #150

Closed code423n4 closed 2 years ago

code423n4 commented 3 years ago

Handle

tensors

Vulnerability details

Impact

Crucial addresses in function inputs should be checked to be non-zero to prevent loss of funds, initializing the zero address and generally prevent easy misinputs.

Proof of Concept

L101, Controller.sol The strategy address should be checked, otherwise the protocol could accidentally lose funds.

Recommendations

Add a simple require check.

GainsGoblin commented 3 years ago

Duplicate of #35

GalloDaSballo commented 2 years ago

Duplicate of #35