search

code-423n4 / 2021-12-vader-findings

0 stars 0 forks source link

Guardian Is not Set On The Constructor #150

Closed code423n4 closed 2 years ago

code423n4 commented 2 years ago

Handle

defsec

Vulnerability details

Impact

On USDV contract, Guardian is not set on the constructor. Guardian address will be zero without calling setGuardian.

Proof of Concept

  1. Navigate to the following contract.

"https://github.com/code-423n4/2021-12-vader/blob/fd2787013608438beae361ce1bb6d9ffba466c45/contracts/tokens/USDV.sol#L193"

Tools Used

None

Recommended Mitigation Steps

Set guardian address in the constructor. That will cost additional gas when calling it after deployment.