Submission Details
Severity:
buyLoan function doesn't check min loan and collateral ratio
Summary
buyLoan function doesn't check min loan and collateral ratio for the pool
Vulnerability Details
Each pool has min loan amount and min collateral ratio allowed. This is needed in order to not receive unwanted loans.
However, buyLoan function doesn't check that variables and as result it's possible that loan will be bought with debt that is less than pool's min loan amount or collateral will be provided not enough according to the pool's collateral ratio.
Impact
Unwanted loan can be purchased.
Tools Used
VsCode
Recommendations
Add such checks as it's done here
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.