Submitted by bin2chen, also found by kaden
https://github.com/code-423n4/2023-01-astaria/blob/1bfc58b42109b839528ab1c21dc9803d663df898/src/CollateralToken.sol#L526-L534
ClearingHouse.safeTransferFrom() to execute successfully even if there is no bid.
settleAuction is called at the end of the auction and will check if the status is legal
This check seems to be miswrittenThe normal logic would be
This causes ClearingHouse.safeTransferFrom() to execute successfully even if there is no bid.
androolloyd (Astaria) confirmed
Picodes (judge) commented:
