Closed code423n4 closed 2 years ago
cmichel
Some parameters of functions are not checked for invalid values:
Executioner.constructor: wrappedNativeToken
ModuleRegistry.constructor: _admin
Slingshot.constructor: _admin, _wrappedNativeToken
Wrong user input or wallets defaulting to the zero addresses for a missing input can lead to the contract needing to redeploy or wasted gas.
Validate the parameters.
Duplicate of #89
tommyz7
commented
2 years ago tommyz7
commented
2 years ago
Handle
cmichel
Vulnerability details
Some parameters of functions are not checked for invalid values:
Executioner.constructor: wrappedNativeTokenshould be checked to be non-zeroModuleRegistry.constructor: _adminshould be checked to be non-zeroSlingshot.constructor: _admin, _wrappedNativeTokenshould be checked to be non-zeroImpact
Wrong user input or wallets defaulting to the zero addresses for a missing input can lead to the contract needing to redeploy or wasted gas.
Recommended Mitigation Steps
Validate the parameters.