It is obvious, escrow must be liable for any loss of funds. First, it is his service and he is paid for it.  Second, unless parties agrees that escrow shouldn't held responsible for any losses of the fund, escrow bear 100% responsibility if things like hacks happened. Just like what happened in julerz12 case. Being a bounty manager and at the same time escrow should held him liable for any losses.  Although I don't think that he hacked the fund himself, he must bear the responsibility of paying back the escrowed money which I think he is promising to do, taking responsibility of the incident.