40,000 USDC
View results
Submission Details
Severity: gas

Add a withdraw function when status is confirm

Vulnerability Details

When Escrow has token amounts more than price, if a buyer calls confirmReceipt, then the remaining amount is locked in escrow. There is no function that can withdraw that.

Impact

The some of tokens that the escrow has are locked.

Tools Used

manual

Recommendations

Add a withdraw function that can be called by a buyer if status is confirm.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.