Summary

If this protocol is using `usdc as the token, An attacker(buyer/seller) can blacklist and cause loss to either buyer or seller

Vulnerability Details

3 scenarios where the loss of funds or revert can happen:

1. seller reports their findings to the buyer then the attacker sends a small amount of usdc into the contract/users, the admin of usdc blacklists the contract causing a blacklist on the contract/user's funds will be stuck in the contract forever.
   The 2 other scenarios have the same action but different ways an actor can cause some undesired effect

2. seller is not happy with Arbiter buyAmount so he blocklists usdc and makes the resolveDispute revert

3. buyer is not happy with the result so they dos resolveDisupte

Impact

as you can see it will cause reverts for certain actors but the worst one will be loss of funds because the funds are stuck

Tools Used

Recommendations

using pull instead of push mechanism and allowing all actors to change their address