sherlock-audit / 2023-07-blueberry-judging

2 stars 1 forks source link

0x52 - Issue #145 from Update #1 is still present in IchiSpell #107

Closed sherlock-admin2 closed 1 year ago

sherlock-admin2 commented 1 year ago

0x52

high

Issue #145 from Update #1 is still present in IchiSpell

Summary

Issue 145 from Update 1 has not been fixed. Using block.timestamp is equivalent to using no deadline at all. This is because block.timestamp is relative and always "now", which means it can never be in the past and can therefore never be expired.

Vulnerability Detail

See Issue 145

Impact

See Issue 145

Code Snippet

IchiSpell.sol#L199-L256

Tool used

Manual Review

Recommendation

Use a user specified input as the deadline

Duplicate of #14