Submission Details
Severity:
Integer Overflow in Auction.sol
Author Revealed upon completion
Vulnerability Details
The placeBid() function in Auction.sol does not account for potential integer overflow when adding the bid amount to the current highest bid.
Impact
An attacker could exploit this to cause unexpected behavior or bypass bid checks.
Review
Manual review
Recommendations
Use SafeMath Library
Employ OpenZeppelin's SafeMath library to handle arithmetic operations safely.
import "@openzeppelin/contracts/utils/math/SafeMath.sol";
contract Auction {
using SafeMath for uint256;
function placeBid(uint256 bidAmount) external {
uint256 newBid = highestBid.add(bidAmount);
// Bid placement logic
}
}
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
View preliminary resultsAppeals Review
Appeals are being carefully reviewed by our judges.
Rewards Distribution
The contest is complete and the rewards are being distributed.