Lines of code

Vulnerability details

Impact

AccountantDelegate.initialize() is missing a zero address check for treasury_ parameter, which could may allow treasury to be mistakenly set to 0 address.

#Proof of Concept

Tools Used

Manual review

Recommended Mitigation Steps

Add a require() check for zero address for the treasury parameter before changing the treasury address in the initialize function.

The text was updated successfully, but these errors were encountered:

All reactions