Submission Details
Severity:
Loss of pool funds due multiple balance debt deduction
Summary
When a borrower calls the ṙefinance function in the Lender contract the new pools balance updated multiple times.
Vulnerability Details
Borrower calls ṙefinance function in the Lender contract.
The debt is deducted two times from the new pools balance.
Impact
Loss of funds for the lender's pool
Tools Used
Manual review
Recommendations
Remove line https://github.com/Cyfrin/2023-07-beedle/blob/main/src/Lender.sol#L698
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628
USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.