Submission Details
Severity:
No minimum Amount to deposit allow users to enter auction with dust amounts
Vulnerability Details
In the current implementation of SpiceAuction::bid() Bidding is not restricted of the amount of tokens sent. It can make bidding easy for anyone to just deposit 1 wei of token, and participate in that auction without adding a real value to it.
Impact
Users will enter the auction by many appox. nothing
Tools Used
Manual Review
Recommendations
Allow a minimum amount to deposit for users, in order to enter the auction.
Prize pool breakdown
Total prize
25,000 USDC
nSLOC
99825 USDC / LOC
20,000 USDC
2,500 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.