CodeHawks Escrow Contract - Competition Details

Summary

When rebase tokens with a balance less than the arbiterFee due to rebase events, resolveDispute fails, causing those rebase tokens to be locked in the contract.

Vulnerability Details

The balance of the rebase tokens will be adjusted with the rebase event, if the balance becomes smaller than the arbiterFee, then when the Arbiter calls resolveDispute, since tokenBalance< arbiterFee, resolveDispute will be revert, resulting in the rebase tokens being locked in the contract.

Impact

Resulting in the rebase tokens being locked in the contract.

Tools Used

None

Recommendations

Consider allowing the Arbiter to call resolveDispute with an actualArbiterFee parameter that is less than the arbiterFee, and send the Arbiter the actualArbiterFee instead of the arbiterFee amount of tokens.