Seller can grief the Buyer (to pay arbiterFee even if no work is done)
Summary
Seller can grief the Buyer (to pay arbiterFee even if no audit work is done by the Seller) -- Buyer ends up needing to pay arbiterFee for no reason.
Vulnerability Details
The Seller can just initiate the dispute, and do no audit work as promised -> Buyer will need to pay
arbiterFeein order to get the money back.
Impact
Buyer gets grieved and loses arbiterFee for no reason.
Tools Used
Manual Review
Recommendations
Add a penalty (or let the Seller put sth at stake, for initiating the dispute), which can get seized in case the Arbiter deems this as a bad act.
Add a delayed withdrawal by the Buyer, which can be fully redeemed but with sufficient time delay.
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.