highLogic errorEVM-Solidity
RadicalxChange: Highest bidder can withdraw his collateral due to a missing check in _cancelAllBids
- Payout
- $0
- Protocol
- RadicalxChange
- Disclosed
- Mar 22, 2024
- Source
- sherlock
RadicalxChange's EnglishPeriodicAuction contract lets any bidder cancel their bids across all rounds via _cancelAllBids, and this function omits the eligibility check that _cancelBid enforces — namely that the current highest bidder cannot cancel. As a result, …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.