Submission Details
Severity:
not min duration auctionLength can lead to lender getting borrowers collateral
Summary
user validated input for auction length only checks the value not being 0, but, a for example 1s auctionLength can lead to a "instant" liquidation of the borrower losing its collateral, also resulting in an inability for anyone to participate in the dutch auction.
Vulnerability Details
File: src/Lender.sol
´´´
// the only check to auctionLength
136: p.auctionLength == 0 ||
471: if (block.timestamp > loan.auctionStartTimestamp + loan.auctionLength)
472: revert AuctionEnded();
## Impact
Borrower can lose its collateral in any moment the lender decides to.
## Tools Used
Manual Review
## Recommendations
Set a minimum duration for auction length to let the borrower react in a considerable amount of time
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.