Submission Details
Severity:
Missing validation of _totalTokens in FjordAuction
Summary
When the FjordAuction contract is created, there is not validation on _totalTokens parameter in constructor().
Vulnerability Details
If the _totalTokens is set as 0 and someone bid() on it they will get no auctionTokens as the multiplier will be 0.
Impact
It'll lead to user losing Fjord points and will get no auction tokens in return.
Tools Used
VS Code
Recommendations
Add a constraint of _totalTokens > 0 in constructor.
if (_totalTokens == 0) {
revert InvalidAuctionTokens();
}
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
66230 USDC / LOC
16,000 USDC
2,500 USDC
1,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.