Submission Details
Severity:
Lender.sol - giveLoan()- Missing loanIds.length == poolIds.length validation
Summary
There is no validation that loanIds[] and poolIds[] have the same length.
Vulnerability Details
Impact
Tools Used
Manual Review
Recommendations
function giveLoan(
uint256[] calldata loanIds,
bytes32[] calldata poolIds
) external {
+ require(loanIds.length = poolIds.length, "invalid");
}
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.