TokenFi

Addresses are not validated before assignment or external calls, potentially allowing the use of zero addresses and leading to unexpected behavior or vulnerabilities. For example, transferring tokens to a zero address can result in a permanent loss of those tokens. ```solidity=75 taxHandler = ITaxHandler(taxHandlerAddress); treasuryHandler = ITreasuryHandler(treasuryHandlerAddress); ``` - `taxHandler`,`treasuryHandler` are not zero-checked before being used. ```solidity=60 treasury = payable(treasuryAddress); ``` - `treasuryAddress` is not zero-checked before being used.

The contract allows the router address to be set arbitrarily during contract deployment. This introduces a potential vulnerability where a malicious router can be set during the contract deployment process. A malicious router could potentially behave in unexpected ways, leading to loss of funds or other vulnerabilities being exploited.