Skip to content

Canvas can be a reserve auction and a dutch auction#

Low Risk

In Create.sol there are createCanvas and updateCanvas functions through which canvas can be created/updated. In both cases, someone can set a canvas to have both a reserve auction, dutch auction and refundable dutch, although there is no support for this kind of setup in the rest of the code. Such canvas will be treated as reserve auction.

Recommendation#

Add a check that prevents reserveAuction to be true at the same time that refundableDutch is true or dutchEndTime is set.