[EVMN] Incorrect Asset Transfer Operation
Summary
The incorrect asset transfer operation prevents asset accumulation on the contract, rendering the auction useless.
Vulnerability Details
The code on line 113 uses ERC20.transfer() rather than ERC20.transfer_from(). This means that the asset will not transfer the assets from the bidder to the contract, but rather transfer assets from the contract to itself.
Impact
Potential revert if the contract holds no assets, and no asset accumulation when function bid() is called.
Tools Used
Manual review
Recommendations
Consider replacing transfer() with transfer_from()
Appeal created
`transfer` instead of `transfer_from`
In the `bid` function is wrongly used `transfer` function instead `transfer_from`.
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.