[Feature]: Escrow Security & Authorization Tests

[SudiptaPaul-31]

🔍 Problem Statement

Description

Create a comprehensive security test suite for the Soroban escrow contract. This suite ensures that all critical authorization paths are validated and that invalid operations fail safely without compromising funds or contract integrity.

---

Test Cases

• Unauthorized release attempt — ensure only the client can release funds.
• Unauthorized refund — verify refunds can only be triggered by authorized parties.
• Double release — prevent duplicate payouts for the same milestone.
• Invalid milestone — reject submissions or approvals for non‑existent milestones.
• Incorrect payment amount — enforce strict checks against overpayment or underpayment.
• Dispute after completion — disputes cannot be raised once the contract is finalized.
• Unauthorized contract state transition — block state changes by non‑authorized actors.
• Repeated transaction execution — ensure idempotency and prevent replay attacks.

---

Tasks

• Implement unit tests for each critical authorization path.
• Add integration tests simulating real contract interactions.
• Include negative test cases to confirm invalid operations fail safely.
• Automate test execution in CI workflow.
• Add event validation — ensure proper events are emitted for valid/invalid actions.

---

Acceptance Criteria

• ✅ All critical authorization paths are tested — coverage includes client, freelancer, and arbitrator roles.
• ✅ Invalid operations fail safely — contract reverts without unintended side effects.
• ✅ Tests are included in the CI workflow — automated checks run on every commit/PR.
• ✅ Event emission validated — correct events appear in logs for both success and failure cases.
• ✅ Replay/double execution prevented — contract state remains consistent under repeated attempts.

📈 Expected Impact

High — Would significantly improve user experience

[belloaliyu11]

@belloaliyu11 has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Hi Maintainer, I’d like to work on this issue. I have experience handling similar tasks and can start immediately

ℹ️ Repo Maintainers: To accept this application, review their application or assign @belloaliyu11 to this issue.

[samuel96080]

@samuel96080 has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

I will like to work on this please assign to me

ℹ️ Repo Maintainers: To accept this application, review their application or assign @samuel96080 to this issue.