DeFiFoundry
20,000 USDC
View results
Submission Details
Severity: low
Invalid

Only Owner will be able to call createAuction function

Summary

The createAuction function in the provided Solidity contract allows the owner to create a new auction and transfer tokens to the auction contract. The function makes use of the onlyOwner modifier to ensure that only the contract owner can create auctions. While the logic appears sound, there are some potential risks associated with the use of transferFrom and the unchecked salt in the contract creation.

Vulnerability Details

this function should be called by any one.

Impact

this function will be only called by owner

Tools Used

Recommendations

remove onlyOwner

Updates

Lead Judging Commences

inallhonesty Lead Judge 12 months ago
Submission Judgement Published
Invalidated
Reason: Design choice

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.