It has been identified that the buyLoan
function does not check if the debt is higher than the minimum amount of the new pool that the loan is being transferred to.
The vulnerability arises from the buyLoan
function, which allows someone to buy a loan in auction. The function does not check if the debt is higher than the minimum amount of the new pool that the loan is being transferred to. This can lead to inconsistencies and potential inaccuracies in the loan transfer process.
This vulnerability can lead to significant inaccuracies in the loan transfer process, which can affect the fairness of the loan terms and potentially lead to financial losses for either the borrower or the lender.
Manual Review
To mitigate this vulnerability, it is recommended to revise the buyLoan
function to include a check that ensures the debt is higher than the minimum amount of the new pool that the loan is being transferred to.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.