code-423n4 / 2022-01-trader-joe-findings

2 stars 0 forks source link

Mint() by OnlyOwner Lack of Zero Address Check for Address _to #223

Open code423n4 opened 2 years ago

code423n4 commented 2 years ago

Handle

Meta0xNull

Vulnerability details

Impact

Even though OnlyOwner can Mint token again if input or wallets defaulting to the zero addresses, it still waste of gas.

Proof of Concept

https://github.com/code-423n4/2022-01-trader-joe/blob/main/contracts/RocketJoeToken.sol#L37-L38

Tools Used

Manual Review

Recommended Mitigation Steps

Requires Addresses is not zero.

require(_to != address(0), "Address Can't Be Zero")