Submission Details
Severity:
`auctionEnd::FjordAuction` lacks proper access control mechanisms
Summary
Auction Creator: Only the owner of the AuctionFactory contract can create an auction and offer a valid project token earn by a "Fjord LBP event" as an auctionToken to bid on.
so only the admin should be able to end the Auction.
function auctionEnd() external {
Impact
a malicious user can call the AuctionEnd function
Recommendations
use access control for the AuctionEnd function
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
66230 USDC / LOC
16,000 USDC
2,500 USDC
1,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.