Summary

Incorrect amount of tokens may be transfered to the seller.

Vulnerability Details

All the contract balance is transfered to the seller when confirming the receipt in the confirmReceipt function.

Impact

In case the incorrect amount of tokens (more than price) was transfered to the contract, the seller will get more tokens than required.

Tools Used

Manual Review

Recommendations

Transfer the i_price amount of tokens to the seller, and transfer the rest of tokens to the buyer.