Potential Buyer Oracle Fee Loss Due to Validation Timing Misalignment
Summary
A critical timing issue within the validation and purchase phases can lead to buyers losing their oracle fees. If the final validation for an asset occurs after the buy phase has ended, the buyer is unable to complete the purchase, forfeiting any oracle fees paid. This misalignment between validation completion and the purchase deadline creates a scenario where the buyer’s interest is unfulfilled, and their funds are effectively wasted.
Vulnerability Details
Impact
This vulnerability occurs in the timing and coordination between the following components:
The validation process: Final validations must complete before the buy phase concludes.
The purchase() function: Relies on the availability of validated assets within the active buy phase to complete transactions.
Tools Used
Manual Review
Recommendations
Provide buyers with an automatic refund of oracle fees if validations complete after the buy phase, ensuring users do not incur unnecessary losses.
Lead Judging Commences
There is no guarantee that task will be completed and buyerAgent will get a response to its purchaseRequest before the round ends, but that was already paid for
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.