User @Swaldman made a great catch today and found a bug in ENS auction code:


What are the various ways to fix/prevent this attack vector before deployment?

  • 2
    Without reading all of the details (or trying to understand it) - change _value to actualValue in those 3 places? :-) Mar 14, 2017 at 18:59

1 Answer 1


The fix is in https://github.com/ethereum/ens/pull/51/files and is as described by the comment by @Richard Horrocks: change _value to actualValue

For example:

} else if (_value > h.value) {

should be:

} else if (actualValue > h.value) {
  • Whilst this may theoretically answer the question, it would be preferable to include the essential parts of the answer here, and provide the link for reference. :P
    – q9f
    Jun 7, 2017 at 10:47

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.