20,000 USDC
View results
Submission Details
Severity: high
Valid

The protocolInterest generated by the lender's invocation of the function "giveLoan" should not be added to the borrower's debt.

Summary

The protocolInterest generated by the lender's invocation of the function "giveLoan" should not be added to the borrower's debt.

Vulnerability Details

The protocolInterest generated by the lender's invocation of the function "giveLoan" should not be added to the borrower's debt.

Impact

The borrower is increasing their debt, which does not belong to them.

Tools Used

vscode

Recommendations

Do not include the protocolInterest in the borrower's debt.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.