First Flight #13: Baba Marta

Summary

A producer who has initially listed there martenitsa token for sale on marketplace, may require to transfer there token as present will still make the token being listed as sale on the marketplace even though there token is already sent as present to a user, will make other users not able to buy the token.

Even though the token is listed for sale, but they will not be able to buy it as it is sent as present by the seller.

Vulnerability Details

The vulnerability occurs when the seller list there martenitsa token in marketplace, sends it as a present before any user can buy it makes the listing of their token still remain in marketplace.

As a result of which users willing to buy that producer's token will face a DoS as the token is already sent as present.

Impact

Even though the token is listed for sale, the users will not be able to buy it as it was transferred as a present.

Tools Used

Manual Review

Recommendations

Either doesn't allow the producer to send their token as present in case it is listed or delete the listing when the producer sent it as present when it is already listed on marketplace.