Submission Details
Severity:
Denial of Service (DoS):Lender.sol
Summary
In repay and seizeLoan are two function in Lender.sol contract which are transfer token first then delete the loan record.
Vulnerability Details
Denial of Service attack can be perform on the contract because ,we transfer the token to the users then we delete the record which may lead to contract to attack and make it unable to used for users.
Impact
unable to used it and may be cause the lose of money.
Tools Used
Foundry, code review and static analysis tool
Recommendations
Delete loan record first then transfer token.
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.