20,000 USDC
View results
Submission Details
Severity: high

A lender can take from the borrower collateral

Summary

A lender can take from the borrower collateral, if he set 1 second for auction Time

Vulnerability Details

If the lender set the auction time for 1 seconds. he can use startAuction that, and no one can buy the collateral than he will use seizeLoan and he will take to collateral of the user.

Impact

Loss of funds for user

Tools Used

Manual Review

Recommendations

When setting a new pool make a require the minAuction to be more than a 1 day

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.