Missing events and timelocks for functions that change critical parameters
Summary
Changes of critical parameters (lenderFee and borrowerFee) are instant and without emitted events.
Vulnerability Details
Impact
Missing events and timelocks of such critical parameters as lenders and borrowers fees do not promote transparency. Such changes affect users perception of fairness and trustworthiness of protocol and don't give time to users to exit their positions if they don't agree with the changes.
Tools Used
Manual Analysis
Recommendations
Emit events in setLenderFee and setBorrowerFee and also implement timelocks to introduce a time delay in those functions so users who disagree with those changes can have time to stop exposure of their funds to the protocol.
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.