40,000 USDC
View results
Submission Details
Severity: medium
Valid

Protocol transfer maybe failed if arbiter or seller is in token contract blacklist

Summary

Protocol transfer maybe failed if arbiter or seller is in token contract blacklist.

Vulnerability Details

Some token contract may have blacklist mechanism, like USDT. When arbiter or seller is in blacklist, transfer will be failed and protocol will dos.

Impact

Escrow contract will dos when arbiter or seller is in token contract blacklist.

Tools Used

vscode, Manual Review

Recommendations

Valid arbiter or seller cannot be in blacklist, or add arbitration expiry time to escow contract. Once the time expires, contract should refund the asset to buyer.

reference: https://github.com/sherlock-audit/2023-06-bond-judging/issues/81

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.