The unit tests were not passing, this means that certain functionality of the code could be untested and any future developments are more likely to introduce bugs.
$ npx hardhat run test
Basket
1) should allow settling an auction by the auction bonder
✓ should allow minting if user has all needed balances and approvals (127ms)
4 passing (3s)
1 failing
1) Auction
should allow settling an auction by the auction bonder:
Uncaught Error: Transaction reverted without a reason string
at Auction.settleAuction (contracts/Auction.sol:107)
$ npx hardhat run test
Auction
✓ should allow bonding by one user when there is an auction ongoing (89ms)
✓ should allow burning the bond if an auction hasn't been settled in 24 hours (70ms)
✓ should allow settling an auction by the auction bonder (106ms)
Basket
✓ should allow minting if user has all needed balances and approvals (126ms)
✓ should allow burning if user has basket tokens (128ms)
Factory
✓ Should add a valid proposal
✓ Should Revert on Duplicate Tokens
✓ Should Revert on < minLicenseFee
✓ Should Revert on zero values
✓ Should Revert on mismatched Arrays
✓ Should create a valid basket and mint 1 Basket token to sender (250ms)
✓ Should fail basket creation if creator doesn't have enough tokens or not approved (285ms)
12 passing (5s)
Handle
bw
Vulnerability details
Impact
The unit tests were not passing, this means that certain functionality of the code could be untested and any future developments are more likely to introduce bugs.
The values used in the Auction.test.js#L160 were incorrect.
Proof of Concept
Tools Used
N/A
Recommended Mitigation Steps
Update the unit test to use the correct values.