Submission Details
Severity:
Funds will be locked if buyer or seller get into an accident and there’s no arbiter set because both seller and buyer trust each other
The contract allows for address(0) arbiter
https://github.com/Cyfrin/2023-07-escrow/blob/main/src/Escrow.sol#L49
However, in case of an accident happening to buyer or seller the funds will be locked with no way to recover.
https://github.com/Cyfrin/2023-07-escrow/blob/main/src/Escrow.sol#L103
Mitigation:
Always set a valid arbiter
Implement a new role which can set an arbiter/transfer funds
Implement a claim with a deadline. If no challenge before deadline transfer the funds to the claimer.
Prize pool breakdown
Total prize
40,000 USDC
nSLOC
186215 USDC / LOC
37,000 USDC
3,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.