Submission Details
Severity:
The lender can immediately start an auction
Summary
The lender can start an auction after borrowing without giving enough time for the borrower to repay the loan.
Vulnerability Details
After a borrower makes a loan from a pool, it will create a loan with auctionStartTimestamp == uint256.max, then the lender can immediately start an auction for this borrow don't give time enough to repay the borrow.
Impact
Any loan can be put up for auction by the lender immediately after the loan starts.
Tools Used
Manual Review
Recommendations
It is recommended to add a new variable to calculate the minimum amount of time before a lender can start an auction.
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.