Refund actual deposit, and not bid value.

Thanks to @jonasnick for finding this.
Fixes #349
This commit is contained in:
chriseth 2016-01-12 00:47:23 +01:00
parent aa645d1192
commit 3d66e5ad2e

View File

@ -396,7 +396,7 @@ high or low invalid bids.
// Bid was not actually revealed.
// Do not refund deposit.
continue;
refund += value;
refund += bid.deposit;
if (!fake && bid.deposit >= value)
if (placeBid(msg.sender, value))
refund -= value;