Submission Details
Severity:
`buyLoan()`does not check if `pool.loanToken == loan.loanToken`
Summary
buyLoan()does not check if pool.loanToken == loan.loanToken. Attacker can set a fake pool and a fake pool.loanToken and then call the buyLoan() to steal the loan.It will cause user lossing funds.
Vulnerability Details
https://github.com/Cyfrin/2023-07-beedle/blob/main/src/Lender.sol#L465
Impact
It will cause user lossing funds.And attacker does not need pay more funds.
Tools Used
manual
Recommendations
check if pool.loanToken == loan.loanToken
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.