Summary

If a dispute process is started and the arbiter does not act the funds are locked forever.

Vulnerability Details

In the Escrow contract it's possible to start a dispute process either by the seller or the buyer. But there is no possibility to mutually agree on an outcome of the dispute.
If the arbiter's keys lost/unavailable there is no way to access the funds by any of the parties, leading to the funds locked forever/temporarily.

Impact

Funds locked in contract

Tools Used

Manual review

Recommendations

Add a function to be able to mutually agree on the dispute process outcome.
For example BOTH the seller and the buyer also has to input how much they should get from the amount of tokens and if both parties agree the funds should be accessible by the parties.