Vulnerability Details

index used for epochId in auctionConfigs should always be epochId + 1 instead of epochId otherwise incorrect Id will be fetched.
like here in function startAuction epochId is given to fetch last auction config but in other place where current auction ID needed then epochId should be epochId + 1.

Impact

Incorrect config fetched/updated in some cases

Tools Used

Manual

Recommendations

For fetching or updating current Auction config index should be epochId + 1