code-423n4 / 2022-02-foundation-findings

0 stars 0 forks source link

QA Report #60

Open code423n4 opened 2 years ago

code423n4 commented 2 years ago

Pin the version of Solidity used

Consider pinning the version of Solidity e.g. =0.8.12

NFTMarketBuyPrice.setBuyPrice lack price validation

NFTMarketBuyPrice.setBuyPrice allow price=0 which doesn't make much sense to the seller https://github.com/code-423n4/2022-02-foundation/blob/4d8c8931baffae31c7506872bf1100e1598f2754/contracts/mixins/NFTMarketBuyPrice.sol#L150

Constant 10% min price increment is too high

Considering a high value auction a 10% min increment might be bad for price discovery, might use a tiered model instead

Initial 15% total fee is not competitive

It is too higher consider OS's 2.5% fee

HardlyDifficult commented 2 years ago
alcueca commented 2 years ago

Unadjusted score: 25 (Including 20 points for the business suggestions)