Use of assert() instead of require() for input validation in RCmarket.sol

[code423n4]

Handle

JMukesh

Vulnerability details

Impact

assert() is used for internal error checking and require() is used to check on input condition, but here assert() is used for input checking

Proof of Concept

https://docs.soliditylang.org/en/v0.8.5/control-structures.html#panic-via-assert-and-error-via-require

https://github.com/code-423n4/2021-06-realitycards/blob/main/contracts/RCMarket.sol#L202

Tools Used

manual review

Recommended Mitigation Steps

use require

[Splidge]

This could be considered a duplicate of #44

[Splidge]

Duplicate of #155

[dmvt]

duplicate of #83