CodeHawks Escrow Contract - Competition Details

Summary

lack of a check to ensure that the escrow is not already disputed before initiating a new dispute

Vulnerability Details

Currently, there is no check implemented to verify if the escrow is already in a disputed state before initiating a new dispute. This means that anyone can call the initiateDispute function multiple times on the same escrow, resulting in unnecessary conflicts and potential abuse of the dispute mechanism.

Impact

Unnecessary conflicts: Allowing multiple disputes on the same escrow can lead to unnecessary conflicts between parties. This can result in confusion, delays, and additional disputes that could have been avoided.

Tools Used

Manual Analysis

Recommendations

Add a check for existing disputes: Modify the initiateDispute function to include a check to ensure that the escrow is not already in a disputed state before initiating a new dispute. This can be done by including a require statement to verify the current state of the escrow.