CodeHawks Escrow Contract - Competition Details

Summary

Double Typecasting Can Increase Code Complexity

Vulnerability Details

EscrowFactory.computeEscrowAddress can lead to unintended behaviour or potential exploit because of multiple typecaste while computing predictedAddress.

Impact

predictedAddress is being computed by using multiple typecastes, making it complex and potentially harder to understand. Typecasting data without appropriate checks can lead to data truncation, which may result in unintended consequences or even vulnerabilities.

Tools Used

Manual Review

Recommendations

A SafeCast library must be used everywhere a typecast is done.