BIDSHOP

CertiK5 Jun 2023Files named in the report

Audit

CertiK reviewed BIDSHOP on 5 Jun 2023: 37 findings, 0 critical; 33 marked fixed, 2 acknowledged, 2 open.

No open critical findings

Open the report Open BIDSHOP’s security record

Report hosted on skynet.certik.com.

Trustblock does not review code.

Findings37

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	1	1
Medium	0	1	0
Low	2	0	32

LowAnyone Can Claim For A UserOpen

Anyone can call `claimRewards()` for any input `_user` to claim their rewards. While the rewards will be transferred to the user, this can cause confusion if a user inputs the wrong address and does not receive any tokens. In addition, if a user's rewards were claimed by someone else and they attempt to claim their rewards the call will revert and may cause confusion for the user.

LowCustom Errors Can Be UsedOpen

From Solidity `v0.8.4`, there are more gas-efficient ways to explain to users why an operation failed than through strings. Using custom errors can significantly reduce the size of the deployed bytecode and reduce the gas cost when calls revert. Lines for the instances of this are given for the contract `AuctionBonus`. However, this optimization can be implemented for all contracts.