QA Report

[code423n4]

QA1: zero address checks

lack of zero address checks -

StakerVault.sol
l#66

    function initialize(address _token) external override initializer {
        token = _token;
    }

Vault.sol
l#73-80

    constructor(IController _controller)
        Authorization(_controller.addressProvider().getRoleManager())
    {
        controller = _controller;
        IAddressProvider addressProvider_ = _controller.addressProvider();
        addressProvider = addressProvider_;
        reserve = IVaultReserve(addressProvider_.getVaultReserve());
    }