Submission Details
Severity:
Missing check for arrays dimensions
Summary
The function giveLoan lacks explicit array length validations.
Vulnerability Detail
File: Lender.sol
function giveLoan(
uint256[] calldata loanIds,
bytes32[] calldata poolIds
) external {
for (uint256 i = 0; i < loanIds.length; i++) {
The function currently operates under the assumption that loanIds.length will always match poolIds.length. Without explicit checks, this can lead to unforseen errors.
Impact
It might lead to systemic issues, including crashes or bugs during certain operations.
Tools Used
A thorough review of the code base was conducted to identify this issue.
Forge testing
Recommendation
Check Arrays length before proceding.
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.