Missing checks for if pool interest rate is higher than the loan interest rate when refinance
Summary
Missing checks for if pool interest rate is higher than the loan interest rate when refinance.
Vulnerability Details
refinance(Refinance[] calldata refinances) can be called by a borrower to refinance a loan.
Borrower specifies the pool to refinance to and the loan will be updated, including loan.interestRate.
However, there is no checks for if pool interest rate is higher than the loan, borrower's loan might be refinaced to a pool with higher interest rate, results in the loan gets higher interest rate than before.
Impact
Borrower's loan gets refinanced to a higher interest rate.
Tools Used
Manual Review
Recommendations
Add checks for if pool interest rate is higher than the loan interest rate when refinance.
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.