You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Description: initialize stores whatever fee_bps value is passed without checking it is a valid basis-point value (0–10,000). A fee above 10,000 bps would attempt to transfer more than the deposited amount, causing an arithmetic underflow and a panic.
File(s): contracts/payment_escrow/src/lib.rs
Priority: High
Implementation & verification: Treat this as a protocol-safety change: check authorization, storage/ABI compatibility, ledger-time behavior, and emitted events before changing the implementation. Add a contract-level regression test for both the invalid and successful paths.
Required change set (2–6 files): Change the relevant contract implementation together with its focused contract test, and include a type, error, or deployment-script adjustment only when required.
initializestores whateverfee_bpsvalue is passed without checking it is a valid basis-point value (0–10,000). A fee above 10,000 bps would attempt to transfer more than the deposited amount, causing an arithmetic underflow and a panic.contracts/payment_escrow/src/lib.rs