when a buyer purchased a punk, the ETH deposited in the contract could be withdrawn only by the buyers, not by the seller.
https://blog.mycrypto.com/nft-smart-contract-bugs-exploits
https://github.com/larvalabs/cryptopunks/issues/1#issuecomment-309288762