It has been identified that the seize
function, which is responsible for liquidation, incorrectly uses the borrowerFee
to calculate the fee taken from the lender, instead of the lenderFee
.
The vulnerability arises from the seize
function, which is responsible for liquidation. The function takes a fee from the lender but incorrectly uses the borrowerFee
to calculate it, instead of the lenderFee
. This incorrect calculation can lead to inaccuracies in the fee taken from the lender during a liquidation.
This vulnerability can lead to significant financial losses for the lender, who may end up paying an incorrect fee during a liquidation.
Manual Review
To mitigate this vulnerability, it is recommended to revise the seize function to correctly use the lenderFee to calculate the fee taken from the lender during a liquidation. The revised function should be thoroughly tested to ensure its accuracy and to prevent potential financial losses.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.