Core Contracts

Summary

Incorrect auction start condition allows a delay in auction participation.

Vulnerability Details

In the whenActive modifier, the condition for checking auction start is:

This strict > condition prevents users from bidding at the exact startTime, introducing an unintended delay. Users must wait for at least one second after startTime to place bids, which may cause confusion or inefficiencies in time-sensitive auctions.

Impact

• Users cannot participate in the auction at the exact startTime, which may lead to frustration or loss of early bidding opportunities.

• If external systems rely on precise auction start times, this issue could cause unexpected failures or delays.

Tools Used

Manual code review.

Recommendations

Modify the whenActive modifier to use >= instead of >: