Omniscia Bluejay Finance Audit
PriceStabilizer Static Analysis Findings
PriceStabilizer Static Analysis Findings
PSR-01S: Inexistent Sanitization of Input Address
Type | Severity | Location |
---|---|---|
Input Sanitization | PriceStabilizer.sol:L28 |
Description:
The linked address
argument affects a sensitive contract variable yet remains unsanitized.
Example:
packages/contracts/contracts/PriceStabilizer.sol
28constructor(address _stablecoinEngine) {29 stablecoinEngine = IStablecoinEngine(_stablecoinEngine);30 _setupRole(DEFAULT_ADMIN_ROLE, msg.sender);31}
Recommendation:
We advise it to be sanitized against the zero-address (address(0)
) to prevent misconfiguration of the contract.
Alleviation:
The Bluejay Finance team stated that they do not wish to sanitize the referenced input arguments as the function is executed only once during the contract's lifetime. As a result, we consider this exhibit acknowledged.