Submission Details
Severity:
No slippage control
Summary
No slippage control in confirmReceipt function
Vulnerability Details
The auditer(seller) wants 10 000$ in ethers(let's say that 1 ether = 2000$), so the Buyer will make a newEscrow that will have price 5 and tokenContract will be the ether address. But when the Buyer confirmReceipt, ether can have a drop and the Auditor will not get his money
Impact
Loss of funds of the Auditor
Tools Used
Manual Review
Recommendations
use slippage control
Prize pool breakdown
Total prize
40,000 USDC
nSLOC
186215 USDC / LOC
37,000 USDC
3,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.