Submission Details
Severity:
Single Timestamp for All Updates
Summary
The contract stores a single lastUpdateTimestamp, which is shared across all token price updates
Vulnerability Details
Impact
This design may be misleading since each token can have its own price update. Consider changing the contract to maintain individual timestamps for each token to ensure accurate tracking.
Tools Used
Recommendations
Add a mapping:
mapping(uint256 => uint256) public tokenLastUpdateTimestamp;
Update this mapping in the setHousePrice() function:
tokenLastUpdateTimestamp[_tokenId] = block.timestamp;
Updates
Lead Judging Commences
inallhonesty 4 months ago
Submission Judgement Published Assigned finding tags:
RAACHousePrices uses a single global lastUpdateTimestamp for all NFTs instead of per-token tracking, causing misleading price freshness data
inallhonesty 4 months ago
Submission Judgement Published Assigned finding tags:
RAACHousePrices uses a single global lastUpdateTimestamp for all NFTs instead of per-token tracking, causing misleading price freshness data
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.