Auction features an auction system based on a custom RPC protocol implementation with two flaws. One is related to reflection and permissions, while the second one is essentially a type confusion using Java’s proxy objects.