Submission Details
Severity:
The buyer can be the arbiter.
Summary
In Escrow contract constructor part, the buyer can be the arbiter.
Vulnerability Details
There is no check to check if the buyer's address is not the same as the arbiter.
Impact
The buyer can put himself in the place of the arbiter.
Tools Used
Recommendations
require for the buyer address isn't equal with arbiter address:
require(buyer != arbiter);
Prize pool breakdown
Total prize
40,000 USDC
nSLOC
186215 USDC / LOC
37,000 USDC
3,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.