Summary

Check whether the buyer,seller,arbiter addresses are not smart contract accounts

Vulnerability Details

Check whether the buyer,seller,arbiter address are EOA, if they are smart contract accounts check whether they can able to receive ether or not

Impact

Low

Tools Used

Manual Review

Recommendations

Before sending any ether to the buyer,seller,arbiter addresses check whether the addresses are EOA or not
if its EOA : send the ether
if not : check whether the contract is able to receive ether or not

Checking whether an account is smart contract or not:

function isSmartContract(address _address) public view returns (bool) {
uint256 codeSize;
assembly {
codeSize := extcodesize(_address)
}
return codeSize > 0;
}