mediumInteger overflow/underflowEVM-Solidity
Plaza Finance: Rounding loss in Auction#slotSize allows malicious user to force auction to be undersold
- Payout
- $0
- Protocol
- Plaza Finance
- Disclosed
- Jan 23, 2025
- Source
- sherlock
Plaza Finance's Auction contract caps the number of bids accepted, evicting the lowest-priced bids once the cap is hit. To stop high-price low-value bid spam from evicting legitimate bids, the contract requires each over-cap bid to be an exact even division of …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.