Lack of Input Validation - Price Parameter
Summary
Lack of Input Validation - Price Parameter
Vulnerability Details
In the EscrowFactory.newEscrow() and or Escrow.constructor() function, there is a lack of validation for whether the price is zero. A zero price does not make sense in an escrow transaction and could indicate an error on the part of the caller.
Impact
This could lead to the creation of escrow contracts with no value, wasting gas and potentially leading to confusion or errors in subsequent interactions with the contract.
Tools Used
Manual Review
Recommendations
Ensure that the price provided to the EscrowFactory.newEscrow() and or Escrow.constructor() function is not zero.
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.