CodeHawks Escrow Contract - Competition Details

Summary

Tokens may be locked in Escrow if arbiter is not set.

Vulnerability Details

Escrow can be created without setting an arbiter, however, there is no guarantee that buyer or seller will have no dispute about the results, and dispute can never be resolved without an arbiter.

Impact

1. Buyer won't be able to get funds back if seller provides bad service;

2. Seller won't be able to get rewards if seller has done the work properly.

Tools Used

Manual Review

Recommendations

Should always set an arbiter in Escrow.