code-423n4 / 2022-05-velodrome-findings

0 stars 0 forks source link

QA Report #136

Open code423n4 opened 2 years ago

code423n4 commented 2 years ago

Missing zero address check :

https://github.com/code-423n4/2022-05-velodrome/blob/main/contracts/contracts/PairFees.sol#L13-L17 _token0 and _token1 is not checked whether they are 0 addresses

https://github.com/code-423n4/2022-05-velodrome/blob/main/contracts/contracts/Velo.sol#L56-L58 _to can be a 0 address , and the transferred fund, would be forever locked

GalloDaSballo commented 2 years ago

Valid per industry standard

1 Low