If `Arbiter` Not Set, And Some Sort Of Escalation(Dispute) Occurs, Then Buyer Unsatisfiedly Lose Funds
Summary
Both Parties Could Trick Each other In Absence Of Arbiter.
Vulnerability Details
As It is mentioned that presence of Arbiter is optional.
Let say Buyer and Seller agree on absence of an arbiter
Then Escrow contract created with no Arbiter
Seller provides his report
As Buyer Not satisfied with report, some sort of disagree occur in both parties
As Arbiter not present so dispute() will not available.
Here 2 things happen,
- Buyer stays in his argue and didn't call confirmRecepient(), so his fund remain locked in contract and seller gets
nothing.
- Or Buyer calls confirmRecepient() and believe that he pays Excess to Buyer for his unstatisfied works
Impact
Tools Used
Manual review
Recommendations
Should re-consider the whole system working
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.