No zero address check for arbiter in Escrow contract's constructor
Summary
No zero address check for arbiter in Escrow contract's constructor. Also, where is arbiter selected/created if not done during constructor?? I couldnt find it...
Vulnerability Details
n/a
Impact
If no arbiter set during escrow deployment(i.e. address(0)), and if arbiter then required afterwards, then oopsie...
DoS of arbitration functionality...
Tools Used
VSC, manual.
Recommendations
Either add a check for zero address in Escrow's constructor as is currently the case for buyer, seller, token address, and/or enable functionality to create/select/add arbiter once off to escrow contract afterwards, like a function which can be called only once?
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.