Skip to content
Request an audit

‹ Findings database

_to argument missing 0x0 address check in the ConnextRouter

Low/InfoFuji Finance audit·Three Sigma·Lending aggregator·6th May, 20233S-FUJI-N11

Description

The ConnextRouter does not check, in the _crossTransfer(...) and _crossTransferWithCalldata(...) functions, if the receiver and routerByDomain[destDomain] equal address(0). This should revert anyway because the Connext contract reverts if _to is address(0), but it's safer to make this additional check.

Recommendation

Check if the address is 0.

Status

Addressed here: Fujicracy/fuji-v2#632

Source

Disclosed by 0xSimao · Sherlock's 2025 Watson of the Year · 21 first places in 57 audit contests