Submission Details
Severity:
[H-03] ABI encodePacked Collision
Summary
Collision can exist due to the use of many dynamic types in abi.encodePacked
Vulnerability Details
The computeEscrowAddress() function in EscrowFactory.sol calls abi.encodePacked() with multiple dynamic arguments and a collision is possible.
Impact
High impact on the creation of contracts
Tools Used
Slither
Recommendations
Do not use more than one dynamic type in abi.encodePacked(). Use abi.encode().
Prize pool breakdown
Total prize
40,000 USDC
nSLOC
186215 USDC / LOC
37,000 USDC
3,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.