Possible Read-Only Reentrancy
Vulnerability Details
the borrow function sends the loan to the user before actually collecting the collateral from the user, this gives the user the opportunity to re-enter the contract and execute extra parts with the already-gotten loan without actually transferring the collateral to the protocol yet
Impact
Malicious actors have the opportunity to re-enter the contract and perform malicious actions with the already-gotten loan without actually transferring the collateral to the protocol yet
Tools Used
Manual Review
Recommendations
transfer the collateral tokens from the borrower to the contract first before giving the borrower the loan
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.