QA Report

[code423n4]

Low

1. There is a common practice of not checking the inputs during the construction of the contracts (constructor)

• LensHub.sol#L58-L59
• FollowNFT.sol#L49
• CollectNFT.sol#L30

2. There is a common practice of not checking the inputs during the initialization of the contracts (initialize)

• LensHub.sol#L70
• FollowNFT.sol#L60
• CollectNFT.sol#L42-L43

3. Logic around handle verification is not completely secure, it's allow handles like .......

• PublishingLogic.sol#L398-L410

[Zer0dot]

Constructor issue solved in lens-protocol/core#80, initialization is a tradeoff we're willing to take, since the hub is only initialized at proxy construction, an error here would mean redeployment as far as I can tell, which is alright. The reason we implemented the checks in constructors is because constructors are not part of the runtime code, so don't affect the code size.

Handle stuff is meant to be delegated to whitelisted profile creators.