Adding bugs for 2021-12-amun

[ZhangZhuoSJTU]

Adding newly disclosed code4rena contest bugs.

Contest

Contest: Amun

Contract Code: https://github.com/code-423n4/2021-12-amun

Number of High Risk Findings: 2

Number of Wardens: 30

Bugs

• [H-01] Unused ERC20 tokens are not refunded, and can be stolen by attacker - (forget to refund leftover tokens, i.e., missing state updates) - S3-1
• [H-02] It might not be possible to withdraw tokens from the basket - SC

[ZhangZhuoSJTU]

Leave this issue open as a reference. This example shows how to make comments for each bug.