CodeHawks Escrow Contract - Competition Details

Summary

Missing address(0) check for arbiter address in the constructor of escrow.sol

Vulnerability Details

The buyer can deploy an escrow with the arbiter being the 0 address. Let's say he forgets to initiate this variable so the
default value will be assigned - address(0). Then the initiateDispute() function will always revert because there is a zero address check inside of it.A dispute might not always be needed , but in case it is - it is not possible in this scenario.

Impact

Low

Tools Used

Manual Review

Recommendations

Move the zero address check for i_arbiter in the constructor.