Submission Details
Severity:
Giving a loan to a new pool is removing totalDebt that is incorrect
Summary
Giving a loan to a new pool is removing totalDebt that is incorrect
Vulnerability Details
Updating the balance of the new pool is removing the total Debt that is the sum of loan.debt + lenderInterest + protocolInterest, but it needs to be only the loan.debt. This way from loan.debt(e.g. 1000 tokens) the user will get new debt which will be 1050.
Impact
Loss of funds
Tools Used
Manual Review
Recommendations
Give the user only loan.debt, and remove from the poolBalance only loan.debt not totalDebt
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.