Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unfair market creation may occur #134

Open
hats-bug-reporter bot opened this issue Sep 30, 2024 · 1 comment
Open

Unfair market creation may occur #134

hats-bug-reporter bot opened this issue Sep 30, 2024 · 1 comment
Labels
bug Something isn't working invalid This doesn't seem right

Comments

@hats-bug-reporter
Copy link

Github username: --
Twitter username: --
Submission hash (on-chain): 0x7d7960ddc0b24a8df45a0269be92260eba8af1f0faf794842ff470dbb1f37d7b
Severity: medium

Description:
Alice creates a market with the question:
"Who will win the 2028 presidential election?"

An attacker front-runs Alice's transaction and creates a market with the exact same parameters.

Now, two markets with identical parameters are created simultaneously.

It becomes difficult for Kleros to determine which one is legitimate because both parties can argue in opposite directions:
"He front-ran me," or "He back-ran me."

In this case, unfair market creation can occur, and the attacker might win the dispute, as there is no clear way to identify which market is legitimate.

Recommendation
One solution I know of is to implement a simple off-chain mechanism that requires users to first submit a question along with their wallet address before creating a market. This can help prevent such issues.

@hats-bug-reporter hats-bug-reporter bot added the bug Something isn't working label Sep 30, 2024
@clesaege
Copy link

There is no problems in having similar/duplicate markets. If you believe there is, please show an example of something breaking for similar/duplicate markets.

@clesaege clesaege added the invalid This doesn't seem right label Sep 30, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working invalid This doesn't seem right
Projects
None yet
Development

No branches or pull requests

1 participant