Omniscia rain protocol Audit
VerifyTier Static Analysis Findings
VerifyTier Static Analysis Findings
VTE-01S: Inexistent Sanitization of Input Address
Type | Severity | Location |
---|---|---|
Input Sanitization | VerifyTier.sol:L29 |
Description:
The linked function accepts an address
-like argument yet does not sanitize it.
Example:
contracts/tier/VerifyTier.sol
27/// Sets the `verify` contract.28/// @param verify_ The contract to check to produce reports.29function initialize(Verify verify_) external initializer {30 verify = verify_;31 emit Initialize(msg.sender, address(verify_));32}
Recommendation:
We advise it to be sanitized against the zero-address to prevent misconfiguration of the contract.
Alleviation:
The input address is now properly sanitized against zero.