40,000 USDC
View results
Submission Details
Severity: medium
Valid

Lack of Functionality to Change Arbiter in Escrow Contract Risks Fund Lock

Summary

Currently there is no way to change the Arbiter, assuming anything happens to the Arbiter's address or if for any other reason both the Buyer and Seller decide to go with another Arbiter there is not a way to to this

Vulnerability Details

Both the Buyer and Seller can be hostages of a malicious Arbiter or if the arbiter's address is compromised since there is no function to change it.

Impact

Funds could be locked after a dispute since there is no function implemented to change the arbiter.

Tools Used

Manual Review

Recommendations

Implement a function to change the arbiter as long as both the Buyer and Seller approve it.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.