search

code-423n4 / 2022-09-artgobblers-findings

0 stars 0 forks source link

QA Report #474

Open code423n4 opened 1 year ago

code423n4 commented 1 year ago

Low Risk Issues

Missing Zero Address Check

Issue

I recommend adding check of 0-address for input validation of critical address parameters. Not doing so might lead to non-functional contract and have to redeploy the contract, when it is updated to 0-address accidentally.

PoC

  1. ArtGobblers.sol:constructor(): "team" address https://github.com/code-423n4/2022-09-artgobblers/blob/d2087c5a8a6a4f1b9784520e7fe75afa3a9cbdbe/src/ArtGobblers.sol#L316

  2. ArtGobblers.sol:constructor(): "community" address https://github.com/code-423n4/2022-09-artgobblers/blob/d2087c5a8a6a4f1b9784520e7fe75afa3a9cbdbe/src/ArtGobblers.sol#L317

  3. GobblerReserve.sol:constructor(): "artGobblers" address https://github.com/code-423n4/2022-09-artgobblers/blob/d2087c5a8a6a4f1b9784520e7fe75afa3a9cbdbe/src/utils/GobblerReserve.sol#L24

  4. PagesERC721.sol:constructor(): "artGobblers" address https://github.com/code-423n4/2022-09-artgobblers/blob/d2087c5a8a6a4f1b9784520e7fe75afa3a9cbdbe/src/utils/token/PagesERC721.sol#L43

  5. Goo.sol:constructor(): "artGobblers" address https://github.com/code-423n4/2022-09-artgobblers/blob/d2087c5a8a6a4f1b9784520e7fe75afa3a9cbdbe/src/Goo.sol#L83

  6. Goo.sol:constructor(): "pages" address https://github.com/code-423n4/2022-09-artgobblers/blob/d2087c5a8a6a4f1b9784520e7fe75afa3a9cbdbe/src/Goo.sol#L84

  7. Pages.sol:constructor(): "goo" address https://github.com/code-423n4/2022-09-artgobblers/blob/d2087c5a8a6a4f1b9784520e7fe75afa3a9cbdbe/src/Pages.sol#L179

  8. Pages.sol:constructor(): "community" address https://github.com/code-423n4/2022-09-artgobblers/blob/d2087c5a8a6a4f1b9784520e7fe75afa3a9cbdbe/src/Pages.sol#L181

Mitigation

Add 0-address check for above addresses.

 

GalloDaSballo commented 1 year ago

1L