Skip to content
Request an audit

‹ All findings

Throughout code-base: missing address checks.

Low/InfoMaple Finance·Three Sigma · Institutional lending · 10th April, 20243S-MAPLE-L09

Description

Whenever addresses change in the code, it's important to be careful about the possibility of setting the wrong address. The following occurrences could be dangerous in this regard

solidity
- MapleProxyFactory, setGlobals(...)
- MapleGlobals, setMapleTreasury(...)

Recommendation

Two options were suggested:

  • use the setPending-accept pattern
  • don't change addresses, given that the contracts are upgradeable

Status

Acknowledged by the team.