Unchecked Maximum Loan Ratio
Summary
The updateMaxLoanRatio function in the contract lender does not enforce limits, allowing potential misuse by altering the loan dynamics.
Vulnerability Detail
Without verification, the maxLoanRatio could be set to extremes, either prohibiting borrowing by setting it to 0 or allowing borrowing with insufficient collateral by setting it to very high numbers.
Impact
Users could be blocked from borrowing, or allowed to borrow far beyond safe levels. This vulnerability could break the trustworthiness of the platform, dissuading users from interacting with it.
Tools Used
Manual review and forge testing.
Recommendation
Implement validation checks to ensure maxLoanRatio remains within intended bounds.
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.