Details
Summary
Bidding a defaulted pixel emits
Deal event with incorrect from parameter.Context
When bid a new pixel that just been defaulted, the
from is the previous owner, not zero address.Form an Attack
N/A
Affected Assets
- contracts/src/TheSpace/TheSpace.sol (commit: 554558a)
Risk Score
Likelihood
Factors | Score | Reason |
Threat Agent Factors | ㅤ | ㅤ |
Skill Level | 1 | N/A |
Motive | 1 | N/A |
Opportunity | 1 | N/A |
Size | 1 | N/A |
Vulnerability Factors | ㅤ | ㅤ |
Ease of Discovery | 1 | N/A |
Ease of Exploit | 1 | N/A |
Awareness | 1 | N/A |
Impact
Factors | Score | Reason |
Technical Impact Factors | ㅤ | ㅤ |
Loss of Integrity | 2 | impact on Deal event |
Loss of Availability | 1 | N/A |
Loss of Accountability | 1 | N/A |
Business Impact Factors | ㅤ | ㅤ |
Financial Damage | 1 | N/A |
Overall Likelihood: 1
Overall Impact: 1.25
Over Risk Score = Impact * Likelihood = 1.25