Fjord Token Staking

Summary

Vulnerability Details:

The bid() function allows bids of any amount, including extremely small values. This could lead to dust bids that increase computational costs without meaningfully contributing to the auction.

Impact:

The absence of a minimum bid amount could result in increased gas costs for token distribution, potential clogging of the system with insignificant bids, and complicate the auction resolution process.

Proof of Concept:

Link to code

Tools Used

Recommendations

1. Implement a minimum bid amount:

   uint256 public constant MIN_BID_AMOUNT = 1e15; // Example: 0.001 tokens

   ​

   function bid(uint256 amount) external {

   require(amount >= MIN_BID_AMOUNT, "Bid too small");

   // ... rest of the function ...

   }