Summary

In case if any actor of Escrow is blocked by erc20 token, then contract can work incorrectly. This because it will be not possible to send tokens in that case.

Vulnerability Details

Escrow has 3 actors: buyer, seller and arbiter.
Audit can be long term process, which depends on code size and dispute process. Because of that it's possible that any of 3 actors will be blocked by erc20 token during that time. Because of that in some cases as dispute, not only the blocked actor will suffer, but everyone.

So for example in case if arbiter address will be banned, then dispute can never be resolved and no one will receive funds.

Impact

Funds will stuck in the contract.

Tools Used

VsCode

Recommendations

Each actor may have ability to change their account.