Submitted by csanuragjain
Consider a scenario where few users contributed in auction but no one has placed any bid due to reason like NFT price crash etc. So there was 0 bid, the NFT owner could seize the crowdfund users fund until they pay a ransom amount as shown below.
Remove the line lastBid\_ = totalContributions; and let it be the last bid amount which crowdfund users actually bided with.
merklejerk (PartyDAO) disputed and commented:
csanuragjain (warden) commented:
merklejerk (PartyDAO) confirmed and commented:
merklejerk (PartyDAO) disagreed with severity and commented:
HardlyDifficult (judge) decreased severity to Medium and commented:
0xble (PartyDAO) resolved:
