Submission Details
Severity:
Zero address check
Summary
Vulnerability Details
The contract lacks zero address checks during the deployment of a new escrow from the factory contract for tokenContract & seller.
Impact
As per the statement made in Discord "Arbiter can be zero address". So, in the case of the seller's address also being a zero address. The fund deposited by the buyer will be stuck in the contract forever.
Tools Used
Manual Review.
Recommendations
Add a zero address check to the function.
Prize pool breakdown
Total prize
40,000 USDC
nSLOC
186215 USDC / LOC
37,000 USDC
3,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.