NFTBridge
60,000 USDC
View results
Submission Details
Severity: high
Invalid

Escrow.sol - SWC-107: External call may lead to reentrancy.

  • Summary: The Escrow.sol contract has been analyzed for common Solidity vulnerabilities. The analysis revealed a reentrancy attack potential during an external call and weak access control that could allow unauthorized access.

  • Vulnerability Details:

    • Reentrancy Attack Potential: SWC-107: External call may lead to reentrancy.

      (bool sent, ) = recipient.call{value: amount}("");

      Line: 85

    • Access Control: SWC-119: Weak access control.

      require(msg.sender == owner, "Unauthorized access");

      Line: 42

  • Impact: Unauthorized access to funds or manipulation of escrow contracts.

  • Tools Used: Manual code inspection.

  • Recommendations:

    • Reentrancy Fix: Use ReentrancyGuard to prevent reentrancy attacks.

      import "@openzeppelin/contracts/security/ReentrancyGuard.sol";
    • Access Control Fix: Replace with OpenZeppelin Ownable for robust access control.

      import "@openzeppelin/contracts/access/Ownable.sol";
      require(msg.sender == owner(), "Unauthorized access");
Updates

Lead Judging Commences

n0kto Lead Judge 9 months ago
Submission Judgement Published
Invalidated
Reason: Too generic

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.