Submission Details
Severity:
Auction Length is not updated with `giveLoan()`
Vulnerability Details
When giveLoan() is called, the AuctionLength is not updated to match the AuctionLength of the new pool. As a result, loans can be given to a pool with specifications that the pool creator specified as unacceptable (a AuctionLength that was too long)
Impact
The AuctionLength parameter for pools can be bypassed, which allows a loan to be transferred which is has longer auctionLength than the lender allowed, giving worse conditions for the lender.
Tools Used
Manual Review
Recommendations
Change auction Length to match the auction length of the target pool when giveLoan() is called.
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.