DeFiFoundry
20,000 USDC
View results
Submission Details
Severity: high
Invalid

Lack of Access Control at auctionEnd Function for FjordAuction contract

Line: https://github.com/Cyfrin/2024-08-fjord/blob/6614c7f97f6fb020f1a980215e7579615027ba8e/src/FjordAuction.sol#L181

Any user can call the auctionEnd function to end the auction.

  • Risk: A malicious user could prematurely end the auction or perform a denial of service attack by repeatedly ending the auction, though there is a check to prevent calling it before the auction end time.

  • Solution: Implement a check to restrict access to the auctionEnd function, so only the contract owner can call it.

Updates

Lead Judging Commences

inallhonesty Lead Judge 9 months ago
Submission Judgement Published
Invalidated
Reason: Lack of quality

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.