highLogic errorEVM-Solidity
Flayer: In the `Listings.sol#relist()` function, `listing.created` is not set to `block.timestamp`.
- Payout
- $0
- Protocol
- Flayer
- Disclosed
- Sep 15, 2024
- Source
- sherlock
Flayer's Listings.sol relist() function copies the caller-supplied Listing struct's `created` field into storage verbatim instead of forcing it to block.timestamp, letting a malicious actor store an effectively-forever timestamp (type(uint32).max). Because Col …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.