search

code-423n4 / 2021-10-badgerdao-findings

0 stars 0 forks source link

No address(0) validation in initialize() #84

Closed code423n4 closed 2 years ago

code423n4 commented 2 years ago

Handle

JMukesh

Vulnerability details

Impact

SInce the parameters of initialize() is used to initialize the state variable and error in these state variable can lead to redeployment of contract

Tools Used

manual review

Recommended Mitigation Steps

add address(0) validation

dapp-whisperer commented 2 years ago

My philosophy is that you can set the address to any incorrect address besides address 0 and suffer from the same issue.

0xleastwood commented 2 years ago

41