Summary

There is a potential scenario in the Escrow contract where the same party can act as both the buyer and seller. While this behavior may not constitute a technical bug, it raises concerns about the logical integrity of the escrow process and could lead to potential misuse of the contract.

Vulnerability Details

The contract allows the same Ethereum address to be assigned to both the buyer and seller roles during contract deployment.

Impact

potential misuse and abuse of the system

Tools Used

Manual analysis

Recommendations

Ensure that the buyer, seller and arbiter addresses are distinct and do not overlap.