CodeHawks Escrow Contract - Competition Details

Summary

Buyer can dispute just to decrease payment.

Vulnerability Details

Both buyer and seller can create dispute.
In this case it's guaranteed, that arbiter will receive fee, which will decrease the amount that seller will receieve.

It's possible, that auditor has done good job, but buyer will trigger dispute just to decrease the payment for the auditor.
So when arbiter will check, he will see, that job was done, but still amount that auditor will receive will be less than agreed initial amount, because fee to the arbiter will be paid.

Impact

Auditor received less funds.

Tools Used

VsCode

Recommendations

Some extra amount is needed from buyer to cover such cases.