Submission Details
Severity:
Same martenitsaToken can be listed twice
Summary
Same martenitsaToken can be listed twice
Vulnerability Details
The listMartenitsaForSale does not check if a token is already listed and allows users to list their tokens multiple times.
PoC
function testSellTwice() public {
vm.startPrank(chasy);
martenitsaToken.createMartenitsa("necklace");
martenitsaToken.approve(address(marketplace), 0);
marketplace.listMartenitsaForSale(0, 10);
marketplace.listMartenitsaForSale(0, 10);
vm.stopPrank();
}
Impact
Impact : Low
Likelihood : Medium
Since users can only list their items multiple times and it cannot be sold the amount of time listed it is a low risk vulnerability
Tools Used
Manual Review
Recommendations
Restrict one token to only one listing
Updates
Lead Judging Commences
bube over 1 year ago
Submission Judgement Published Reason: Design choice
Assigned finding tags:
relisting
Rewards breakdown
nSLOC
239This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.