Submission Details
Severity:
Missing arbiter address can render the contract unusable
Summary
Missing arbiter address can render the contract unusable leading to loss of buyer deposits
Vulnerability Details
Since its impossible to determine at contract deployment time IF arbiter services will be required, the contract can become unusable if arbiter services are later required and the arbiter address was set to the address zero.
Impact
Buyer risks losing deposits.
Tools Used
Manual review
Recommendations
We recommend that the arbiter address should always be set and enforced by the Escrow.sol contract as not the zero address.
In Escrow.sol::Ln 43, Add
if (arbiter == address(0)) revert Escrow__ArbiterZeroAddress();
In IEscrow.sol::Ln 19, add
error Escrow__ArbiterZeroAddress();
Prize pool breakdown
Total prize
40,000 USDC
nSLOC
186215 USDC / LOC
37,000 USDC
3,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.