Absence of Event Emissions in Escrow contract
The functions _depositIntoEscrow and _withdrawFromEscrow do not emit any events to log the deposit or withdrawal of tokens. This absence of events can make it difficult to track escrow activity, audit the contract, or detect and respond to malicious actions.
Mitigation: Emit events when tokens are deposited into or withdrawn from escrow. For example, event DepositedIntoEscrow(address collection, uint256 id, address owner) and event WithdrawnFromEscrow(address collection, uint256 id, address owner) could be added.
Lead Judging Commences
Informational / Gas
Please, do not suppose impacts, think about the real impact of the bug and check the CodeHawks documentation to confirm: https://docs.codehawks.com/hawks-auditors/how-to-determine-a-finding-validity A PoC always helps to understand the real impact possible.
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.