Submission Details
Severity:
unsold zeno Tokens That were Not Auctioned Off Will Be Lost
Summary
in Auction.sol there is no functionality to retrieve the remaining zeno tokens back if they were not sold during the set time frame
Vulnerability Details
Zeno tokens was designed to be auctioned off completely withing the startTime and endTime but if all of them are not sold off, they would remain stuck in the contract as there is no function or functionality to retrieve them.
Impact
remaining Zeno tokens are unretreivable
Tools Used
manual search
Recommendations
send remaining tokens back to a trusted account/owner; for instance
function withdrawUnsoldTokens(address to) external onlyOwner {
require(block.timestamp >= state.endTime, "Auction still active");
uint256 remaining = state.totalRemaining;
state.totalRemaining = 0;
zeno.transfer(to, remaining);
}
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.