# MapleLoan, skim() has no zero address transfer check. Low/Info · Three Sigma · Institutional lending · 10th April, 2024 Finding 3S-MAPLE-L02 of the Maple Finance security review. - Protocol: https://maple.finance/ - Report: /reports/maple-finance-iii-2024 - Source: https://cdn.sanity.io/files/qoqld077/production/36dbe5ca76da3d2392bcee581548067705b8bd36.pdf --- ### Description Could lead to loss of funds if someone sends a zero address by mistake. ### Recommendation Add a transfer to 0 address check. ### Status Addressed in the following PR: https://github.com/maple-labs/open-term-loan-private/pull/49 --- Related findings: - [BRC20Factory::addSigner() and Vault::addSigner() must not allow adding the zero address as a signer](https://0xsimao.com/findings/orange-brc20-signer-adding-zero): Orange Bridge - [Missing key zero value check](https://0xsimao.com/findings/codeup-missing-key-zero-value): CODEUP - [The check rewardSelector != ZERO BYTES4 && rewardDestination.isContract() could be improved](https://0xsimao.com/findings/felix-reward-zero-bytes4-improved): Felix Price Feeds - [Unnecessary currentEpoch zero check in StandardGovernor and ThresholdGovernor](https://0xsimao.com/findings/m-0-current-epoch-zero-threshold): M^0 Minter Gateway