Submission Details
Severity:
Difference in data type on input paratemers
Summary
Bytes32 and uint discrepancy
Vulnerability Details
In EscrowFactory.newEscrow() the salt is passed as bytes32 and then in the sub call to computeEscrowAddress() it is passed as uint
Impact
The contract compiles , so I guess by making the salt of one data type in both newEscrow() and computeEscrowAddress() we can save gas avoiding one data type conversion
Tools Used
Manual Review
Recommendations
Make the salt of one data type in both newEscrow() and computeEscrowAddress()
Prize pool breakdown
Total prize
40,000 USDC
nSLOC
186215 USDC / LOC
37,000 USDC
3,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.