Tadle

Tadle
DeFi
30,000 USDC
View results
Submission Details
Severity: low
Valid

OfferStatus not updated

Summary

The offerStatus is not updated after PreMarktes::CreateTaker

Vulnerability Details

According to the documentation/code natspec, an offerStatus of virgin means the offer doesn't have any takers. But when a taker is created for an offer, the offer status is not updated from virgin and used like that through out the code.

Found in https://github.com/Cyfrin/2024-08-tadle/blob/04fd8634701697184a3f3a5558b41c109866e5f8/src/storage/OfferStatus.sol#L8

Impact

The offer is using the wrong status.

Tools Used

Manual Analysis

Recommendations

Update the offer status when a taker has been matched to an offer and use the updated value throughout the code.

Updates

Lead Judging Commences

0xnevi Lead Judge 10 months ago
Submission Judgement Published
Validated
Assigned finding tags:

finding-PreMarkets-createTaker-Ongoing-Status-Low

Although duplicate of #148, impact mentioned is low severity/invalid, see comments there

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.