Submission Details
Severity:
Functions that contain ERC20 transfers in `Lender.sol` lack `nonReentrant` modifier
Summary
Lack of nonReentrant modifier for functions executing ERC20 transfers in Lender.sol
Vulnerability Details
Lack of nonReentrant modifier for functions executing ERC20 transfers exposes the protocol to reentrancy risk.
Impact
The protocol is at risk of reentrancy attacks. User funds are indirectly at risk.
Tools Used
Recommendations
Add OpenZeppelin nonReentrant modifier to functions that execute transfers.
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.