Submission Details
Severity:
Lack of ERC20 whitelist exposes protocol to malicious token risk
Summary
Lack of ERC20 whitelist in Lender.sol exposes protocol to malicious tokens
Vulnerability Details
Lack of ERC20 whitelist enables attackers to use malicious ERC20 tokens with the protocol.
Impact
The protocol is at risk because malicious ERC20 tokens can interact with the protocol. Funds are indirectly at risk.
Tools Used
Recommendations
Implement an ERC20 whitelisting mechanism.
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.