40,000 USDC
View results
Submission Details
Severity: medium

Impact for Arbiter's mind

Summary

There is possibly an impact for arbiter's mind and his decisions.

Vulnerability Details

initiateDispute() could be called either by buyer or seller. Therefore, if one of them considers to do that and sends the transaction, another one can frontrun it and be the guy who have have emitted the Disputed event and, therefore, be the disputer.
Considering there is a UI for resolving the disputes, the arbiter can decide infairly because of the dishonest person be shown as a disputer.

Impact

The arbiter can infairly resolve the disputes.

Tools Used

Manually

Recommendations

Remove the disputer parameter from the Disputed event for the arbiter to decide fair.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.