-
Notifications
You must be signed in to change notification settings - Fork 23
Closed
Description
STEPS
- An application informs the user that a certain auction is in progress.
- The user places a bid, expecting it to be placed on this auction
- Before execution reaches the Auction4Reputation contract, the blockchain time advances such that the auction number also advances. (Easy to happen if the user delays responding to MM prompts)
RESULT
The bid is not placed on the auction that the user intended. User is surprised and disappointed.
NOTES
There is no way to completely avoid the possibility of voting on the wrong auction unless we change the contract's bid method method to take an additional parameter auctionId which would be the id of the auction in which we intend to bid. The contract bid method would revert if the current auctionId is != to the one we intend to bid in.
orenyodfat
Metadata
Metadata
Assignees
Labels
No labels