60,000 USDC
Submission Details
Severity:
Unused address in escrow mapping
Summary
Unused address which is set when adding to escrow - _escrow[collection][id] = msg.sender
Vulnerability Details
Can be just marked as true/false because in case of l2->l1 bridging, l2 owner can set any address on l1 as the new owner.
Impact
Tools Used
Recommendations
Set _escrow[collection][id] mapping value to a simple true/false
Updates
Lead Judging Commences
n0kto 9 months ago
Submission Judgement Published Reason: Non-acceptable severity
Assigned finding tags:
Informational / Gas
Please, do not suppose impacts, think about the real impact of the bug and check the CodeHawks documentation to confirm: https://docs.codehawks.com/hawks-auditors/how-to-determine-a-finding-validity A PoC always helps to understand the real impact possible.
Prize pool breakdown
Total prize
60,000 USDC
nSLOC
2,30126 USDC / LOC
50,000 USDC
5,500 USDC
4,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.