Submission Details
Severity:
Anyone can buy an auction using someone else's pool
Summary
The buyLoan function doesn't verify if the msg.sender is the lender for poolId, enabling anyone to use another person's pool for loan purchases.
Vulnerability Details
To buy an auction refinancing, the user must have a pool with tokens. However, the buyLoan function does not check if the msg.sender is the lender for poolId. This makes it possible for anyone to use someone else's pool to buy the loan.
Impact
The user can use other pool to buy the loan
Tools Used
Manual Review
Recommendations
It is recommended to check if the poolId is from msg.sender
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.