DeFiFoundry
20,000 USDC
View results
Submission Details
Severity: high
Invalid

Lack of Access Control at auctionEnd Function for FjordAuction contract

Line: https://github.com/Cyfrin/2024-08-fjord/blob/6614c7f97f6fb020f1a980215e7579615027ba8e/src/FjordAuction.sol#L181

Any user can call the auctionEnd function to end the auction.

  • Risk: A malicious user could prematurely end the auction or perform a denial of service attack by repeatedly ending the auction, though there is a check to prevent calling it before the auction end time.

  • Solution: Implement a check to restrict access to the auctionEnd function, so only the contract owner can call it.

Updates

Lead Judging Commences

inallhonesty Lead Judge 10 months ago
Submission Judgement Published
Invalidated
Reason: Lack of quality

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.