The createAuction
function in the provided Solidity contract allows the owner to create a new auction and transfer tokens to the auction contract. The function makes use of the onlyOwner
modifier to ensure that only the contract owner can create auctions. While the logic appears sound, there are some potential risks associated with the use of transferFrom
and the unchecked salt in the contract creation.
this function should be called by any one.
this function will be only called by owner
remove onlyOwner
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.