- user withdraw; can lead to `stop` if underfunded (#28) - provider withdraw
stopif underfunded (stop the contract #28)