40,000 USDC
View results
Submission Details
Severity: medium

No minimum value for i_arbiterFee, which could eliminate incentive for arbiter

Summary

The incentive to arbiter, i_arbiterFee, can be set to zero, so if arbiter loses incentive and is unwilling to resolve disputes, buyers and sellers also lose

Vulnerability Details

i_arbiterFee = arbiterFee in constructor has no lower limit and can be set to zero.

Impact

arbiter does not work and buyers and sellers are in trouble.

Tools Used

Manual

Recommendations

Minimum guaranteed amount or percentage for i_arbiterFee

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.