Escrow

0x54c1c951e578...07d9fa345629

Spurious DragonSource VerifiedEdit this contract

Deployed May 17, 2017 (9 years ago)Block 3,720,243

An optimized two-party escrow whose access guard uses a buggy || instead of &&, so both functions always throw and the contract is bricked.

Spurious Dragon EraVerified Source

Key Facts

Deployer

Vitalik Buterin(0x1db343...fa6ee6)

Deployment Block

3,720,243

Deployment Date

May 17, 2017, 06:14 AM

Code Size

355.0 B

Transactions by Year

20172

Deployment Transaction: 0x646dc2475900cde6...32f67bae2c647329

Description

Deployed May 17, 2017 by Vitalik Buterin (0x1db3439a22ee7c4d034e9b26437d3960b5af0517). An optimized build of a two-party escrow (buyer, seller, arbitrator): finalize() is meant to pay the seller and refund() the buyer. The access guard is written with a buggy || instead of &&: if (msg.sender != buyer || msg.sender != arbitrator) throw;. Because no caller can equal both buyer and arbitrator at once, that condition is always true, so both functions always throw and the contract is effectively bricked: any funds sent can never be released. This exact operator choice reproduces the target's short-circuit codegen; the && form compiles 2 bytes longer. Compiled with solc 0.4.11, optimizer on. The executable runtime reproduces byte-for-byte; only the trailing swarm metadata hash differs. runtime sha256 b1e345aaecdee9afa5ddc48f57dbc700faafcbbf16250c0a35791825bfd65442.

Source Verified

SolidityNear-exact bytecode match (swarm hash differs)

Compiler: v0.4.11

View verification proof

Executable runtime reproduces byte-for-byte from the reconstructed source with solc 0.4.11, optimizer on; only the swarm metadata hash differs. The buggy || guard (always true) is required to match. runtime sha256 b1e345aaecdee9afa5ddc48f57dbc700faafcbbf16250c0a35791825bfd65442.

Spurious Dragon Era

Continued DoS protection. State trie clearing.

Block span: 2,675,000 — 4,369,999

November 22, 2016 — October 16, 2017

Bytecode Overview

Opcodes355

Unique Opcodes88

Jump Instructions22

Storage Operations11

Verified Source Available

This contract has verified source code.

View Verification Proof

Show source code (Solidity)

// Verified by EthereumHistory (ethereumhistory.com)
contract Escrow {
    address buyer;
    address seller;
    address arbitrator;

    function Escrow(address _seller, address _arbitrator) {
        seller = _seller;
        arbitrator = _arbitrator;
        buyer = msg.sender;
    }

    function finalize() {
        if (msg.sender != buyer || msg.sender != arbitrator) throw;
        seller.send(this.balance);
    }

    function refund() {
        if (msg.sender != seller || msg.sender != arbitrator) throw;
        buyer.send(this.balance);
    }
}

External Links

Etherscan Verified Source (if any)

Related contracts

SerpentGamble

Same deployer

Provably-fair betting game where players choose their own odds. The owner settles bets with a commit-reveal random seed. Includes a 2-day emergency refund.

0x034df8...200e2fSeptember 20, 2015

SerpentGamble

Same deployer

Sibling of 0x034dF870 (SerpentGamble). Provably-fair Serpent betting game; players choose their own odds, owner settles via commit-reveal seed, 2-day refund.

0x9ca7e9...fa8bb4September 21, 2015

SerpentGamble

Same deployer

Sibling of 0x034dF870 (SerpentGamble). Provably-fair Serpent betting game; players choose their own odds, owner settles via commit-reveal seed, 2-day refund.

0x75649a...176028September 21, 2015

SerpentGamble

Same deployer

Intermediate build of serpent_gamble, a provably-fair betting dapp (Bet/Win/Loss/NewSeed), related to verified sibling 0x59375871. Source not yet reconstructed.

0xe1a99f...0d2457September 21, 2015

SerpentGamble

Same deployer

Intermediate build of serpent_gamble, a provably-fair betting dapp (Bet/Win/Loss/NewSeed), related to verified sibling 0x59375871. Source not yet reconstructed.

0xdc00a9...15861fSeptember 21, 2015

SerpentGamble

Same deployer

Intermediate build of serpent_gamble, a provably-fair betting dapp (Bet/Win/Loss/NewSeed), related to verified sibling 0x59375871. Source not yet reconstructed.

0xd0ed09...300b48September 21, 2015