Lack of setting Escrow deadline may lead to buyer's tokens being locked
Summary
Lack of setting Escrow deadline may lead to buyer's tokens being locked.
Vulnerability Details
Buyer is required to prepay tokens to Escrow, after seller done his job, the tokens will be sent to seller, if seller provides bad service, buyer can only rely on arbiter to get tokens back.
The problem is that Escrow can be created without an arbiter, and Escrow has no dealline, in this case buyer can never get tokens back even if seller provides bad service or nothing at all.
Impact
Buyer's tokens are locked.
Tools Used
Mannual Review
Recommendations
Set a deadline on Escrow, and buyer can get funds back after deadline if no arbiter is set.
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.