Submission Details
Severity:
Tokens Can Be Recovered Even After Spicy Auction Has Started
Summary
The comment of SpicyAuction::recoverToken() states "Recover auction tokens for last but not started auction". However, tokens actually can be recovered after the auction has started.
Vulnerability Details
The function SpicyAuction::recoverToken() is missing checks for the current auction epoch:
It is not active.
It is not ended.
Therefore, auction tokens could be withdrawn even after the spicy auction has been started. This could lead to bidders cannot claim auction tokens.
Impact
Bidders may be unable to claim auction tokens if they are withdrawn prematurely.
Tools Used
vscode
Recommendations
Add aforementioned checks.
Prize pool breakdown
Total prize
25,000 USDC
nSLOC
99825 USDC / LOC
20,000 USDC
2,500 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.