Submission Details
Severity:
Bid amount validation
Vulnerability Details
The FjordAuction::bid(amount)does not check that the amountis greater than 0. The issue could cause minor disruptions or inefficiencies. The likelihood of someone intentionally bidding 0may be low, however, with no check it remains a possibility
function bid(uint256 amount) external {
if (block.timestamp > auctionEndTime) {
revert AuctionAlreadyEnded();
}
bids[msg.sender] = bids[msg.sender].add(amount);
totalBids = totalBids.add(amount);
fjordPoints.transferFrom(msg.sender, address(this), amount);
emit BidAdded(msg.sender, amount);
}
Recommendations
+ require(amount > 0, "Amount should be greater than 0");
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
66230 USDC / LOC
16,000 USDC
2,500 USDC
1,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.