BadSplitter.sol

contract BadSplitter {
    uint256 funds;
    address sender;
    address recipient;

    // Deposit some funds in to the contract
    function deposit(address other) payable {
        funds = msg.value;
        sender = msg.sender;
        recipient = other;
    }

    // Split an amount of funds between the sender and the recipient
    function split() {
        // Can only be called by the recipient
        require(msg.sender == recipient);

        // Split the funds
        sender.transfer(funds / 2);
        recipient.transfer(funds / 2);
    }
}