b0g0_ctf - Lack of Zero Address Check in deposit Function

[Chidubemkingsley]

Severity: Medium

Vulnerability Details:
The deposit function does not check if the msg.sender is the zero address (address(0)). Although it is unlikely in practice, if this occurs, the contract would mint an NFT to the zero address, potentially leading to issues in tracking ownership.

Proof of Code:

_mint(msg.sender, newTokenId);

Impact:
The contract would mint an NFT to the zero address, potentially leading to issues in tracking ownership.

Recommendation
Add a check to ensure that msg.sender is not the zero address before minting the NFT.

require(msg.sender != address(0), "Invalid address");

[BogoCvetkov]

msg.sender cannot be address(0)