Submission Details
Severity:
no access Control on updateMaxLoanRatio which can cause reverts
Summary
updateMaxLoanRatio has no protection against a lender increasing/decreasing the value causing reverts for borrowers/lenders
Vulnerability Details
if (loanRatio > pool.maxLoanRatio) revert RatioTooHigh();
as you see with these functions a lender of the pool can front run and make the function revert and then backrun keeping the borrower in a bad position
Like when The borrower wants to refianance but won't be able to since of the revert which can cause some issues
Impact
Reverting when the lender doesn't want an actor to call a certain function
Tools Used
Recommendations
Have more constraints when updateMaxLoanRatio can be called
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.