Summary

There is lack of access control in the newEscrow contract.

Vulnerability Details

Anyone can create an escrow contract without authorization.

Impact

Since the contract is publicly accessible without access control, malicious users could deploy a large number of escrow contracts in a short period, potentially leading to a Denial-of-Service (DoS) attack.

Tools Used

Manual review

Recommendations

Implement some form of access control on who can create an escrow contract.