60,000 USDC
Submission Details
Severity:
Incorrect Address Mapping in Escrow contract
Hello ArkProject,
The _escrow mapping stores the address of the original token owner. However, the check in _isEscrowed only ensures that the stored address is greater than 0x0. This check could be insufficient, as it does not guarantee that the correct address is stored.
Mitigation: Instead of just checking if the address is greater than 0x0, ensure that the stored address matches the expected owner or is not address(0x0) before proceeding with operations.
Prize pool breakdown
Total prize
60,000 USDC
nSLOC
2,30126 USDC / LOC
50,000 USDC
5,500 USDC
4,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.