Summary

The buyer can not withdraw own tokens if the offer should be accepted.

Vulnerability Details

Buyer is not able to reject the receipt in case of offer rejection or if the seller is set incorrectly.

Impact

This will lead to the inability of user to withdraw the sent during the deployment tokens if the arbirtrary address is not set.

Tools Used

Manual review.

Recommendations

Allow buyer to reject the receipt in case the arbitrary is not set. Or allow to withdraw the locked tokens in another way.