Submission Details
Severity:
lack of loan token check in buyLoan
Summary
BuyLoan function does not check that both pool's loan tokens are same as it was checked in giveLoan function .
Vulnerability Details
buyLoan transfers a loan from a pool to another pool and both pools should have same loan token , but there is no check to ensure equality of loan tokens addresses so it can leads to loss of funds for one of lenders if a loan has been transferred from a pool to another pool that different loan token .
Impact
loss of funds for one of lenders .
Tools Used
Manual Review
Recommendations
Check both loan tokens are the same .
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.