Submission Details
Severity:
Pool manager can hike interest rates without user knowing
A pool manager can frontrun borrow with updateInterestRate by setting a really high interest rate. Then they can switch it back to normal. That way a user won't have a clue about astronomical interest rates until they have to pay the loan.
Mitigation steps:
Add aggreedInterestRate inside borrow and compare it with the one in the pool
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.