Conduit can be rendered useless #56
Labels
bug
Something isn't working
disagree with severity
Sponsor confirms validity, but disagrees with warden’s risk assessment (sponsor explain in comments)
duplicate
This issue or pull request already exists
QA (Quality Assurance)
Assets are not at risk. State handling, function incorrect as to spec, issues with clarity, syntax
Lines of code
https://github.com/code-423n4/2022-05-opensea-seaport/blob/main/contracts/conduit/ConduitController.sol#L57
Vulnerability details
Impact
Currently their is no check to see whether initialOwner is set to address(0) while creating new Conduit. The new Conduit would get created but user wont be able to use it.
Proof of Concept
Recommended Mitigation Steps
Add below check in createConduit function:
The text was updated successfully, but these errors were encountered: