CodeHawks Escrow Contract - Competition Details

Summary

In case of a dispute, if parties wish, they should be able to reset the contract state to created .

Vulnerability

After a dispute, parties can have a change of heart. Perhaps the seller agrees to the buyers terms or the buyer accedes to the seller's demands. In either case, it is not worth having an arbiter resolving the issue and taking a fee. If the parties mutually resolve the issue, they should have a way to reset the contract state without involving the arbiter. This would a better UX and encourage mutual dispute resolution, leaving arbitration as the very last resort.

Impact

QA

Tools Used

Manual Review

Recommendation

Introduce an additional functionality which allows resetting contract state from disputed to created (or perhaps, introduce a new state, mutualResolved). The access control check should be that both parties have initiated this step; this could be in the form of two bools representing each party's permission.