Core Contracts
Regnum Aurum Acquisition Corp
HardhatReal World AssetsNFT
77,280 USDC
View results
Previous Next
Submission Details
Severity: low
Invalid

Incorrect redemption state for auctions that close without buying

kiteweb3

Summary

The current ZENO::isRedeemable() function only checks whether the current time is past the MATURITY_DATE and does not verify if any purchases occurred during the auction. As a result, if an auction closes with zero buys, front-end applications and users might be misled into believing that redemption is available, even though there are no funds to redeem.

Vulnerability Details

function isRedeemable() public view returns (bool _redeemable) {
@> _redeemable = (block.timestamp >= MATURITY_DATE);
}

Impact

If an auction closes without any purchases, front-end applications or users calling this function might be misled into thinking that redemption is available, when in reality, there is nothing to redeem.

Tools Used

Manual review.

Recommendations

Add in the isRedeemable also a condition that checks if any tokens were minted.

Updates

Lead Judging Commences

inallhonesty Lead Judge 4 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.