Borrower can prevent the seizing of their loan
Summary
Borrowers can prevent seizing of their loan
Vulnerability Details
If a borrower is concerned about their loan being seized by the lender, they can refinance their loan with the same parameters to the same pool during the duration of an auction. As shown below this would reset the auctionStartTimestamp to type(uint256).max which would prevent the calling of seizeLoan:
seizeLoan reverts if loans[loanId].auctionStartTimestamp == type(uint256).max:
Impact
The lender can never seize the borrower's loan, as it can always be refinanced to the same pool.
Tools Used
Manual review
Recommendations
Do not allow refinancing to the same pool.
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.