Submission Details
Severity:
Timing precision loss of the _deployTimestamp in the auction contract
Summary
The _deployTimestampwas not initialized; leaving it to be malleable.
Vulnerability Details
The _deployTimestampis in the constructor.
It can cause havoc where it is used to calculate timing in the contract because it was not initialized to a value.
Impact
Timing precision loss.
Tools Used
Manual review.
Recommendations
Set the _deployTimestamp to 0 first before assigning it directly to block.timestamp.
This way, it will be initialized to a value, and the timing calculation hereafter will be precise.
Prize pool breakdown
Total prize
25,000 USDC
nSLOC
99825 USDC / LOC
20,000 USDC
2,500 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.