bin2chen - triggerEndEpoch() miss check vault.totalAssets() equals 0

[sherlock-admin]

bin2chen

medium

triggerEndEpoch() miss check vault.totalAssets() equals 0

Summary

triggerEndEpoch() miss check vault.totalAssets() equals 0, but it is possible, premium will lose

Vulnerability Detail

in triggerDepeg() have check vault.totalAssets() can't equal 0

    function triggerDepeg(uint256 _marketId, uint256 _epochId) public {
...
        // check if epoch qualifies for null epoch
        if (
            premiumVault.totalAssets(_epochId) == 0 ||
            collateralVault.totalAssets(_epochId) == 0
        ) {
            revert VaultZeroTVL();
        }

but in triggerEndEpoch() don't check the vault.totalAssets() can't equal 0
the protocol does not limit the size of epochEnd-epochStart
triggerEndEpoch() may not be called for some reason
Or the period is very short, triggerEndEpoch() may be maliciously called before triggerNullEpoch() is called
if this happens, and collateral.totalAssets () == 0 , premium will lose

Impact

premium may lose

Code Snippet

https://github.com/sherlock-audit/2023-03-Y2K/blob/main/Earthquake/src/v2/Controllers/ControllerPeggedAssetV2.sol#L144

Tool used

Manual Review

Recommendation

    function triggerEndEpoch(uint256 _marketId, uint256 _epochId) public {
....
+        // check if epoch qualifies for null epoch
+        if (
+            premiumVault.totalAssets(_epochId) == 0 ||
+            collateralVault.totalAssets(_epochId) == 0
+        ) {
+            revert VaultZeroTVL();
+        }
...

Duplicate of #108