Summary

To ensure a transparent and trustworthy arbitrage process, it is essential to implement a restriction that prevents the arbiter from being the same entity as the seller. Without this restriction, the buyer could potentially exploit the system by invoking the initiateDispute() and resolveDispute() functions and then claiming all the tokens for themselves, effectively stealing the rightful payment intended for the seller. Therefore, it is crucial to add this safeguard to prevent any potential abuse of the arbitrage mechanism.

Impact

Seller payment could be stole.

Tools Used

Manual Review

Recommendations

Restrict that the arbiter is not the same than the buyer.