Submission Details
Severity:
Possibility to create an auction that lasts for many years
Summary
A user might accidentally create an auction using function "createAuction" w kontrakcie FjordAuctionFactory.solthat lasts for many years. This is due to the lack of proper input validation.
Vulnerability Details
A user might accidentally create an auction that lasts for many years. This is due to the lack of proper input validation.
Impact
A user by mistake can create an auction that lasts for many years, freezing their funds in the process.
POC
uint256 public biddingTime = type(uint256).max - 1; // or 0 value
function testNewAuction() public {
new FjordAuction(address(fjordPoints), address(auctionToken), biddingTime, totalTokens);
Tools Used
Manual Review, Foundry
Recommendations
Input validation should be applied to all values received from the users.
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
66230 USDC / LOC
16,000 USDC
2,500 USDC
1,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.