Open code423n4 opened 3 years ago
WatchPug
bondTimestamp is a block number instead of a timestamp.
bondTimestamp
https://github.com/code-423n4/2021-09-defiProtocol/blob/main/contracts/contracts/Auction.sol#L58
Consider changing to bondBlockNumber.
bondBlockNumber
Agreed
Handle
WatchPug
Vulnerability details
bondTimestamp
is a block number instead of a timestamp.https://github.com/code-423n4/2021-09-defiProtocol/blob/main/contracts/contracts/Auction.sol#L58
Recommended Mitigation Steps
Consider changing to
bondBlockNumber
.