Submission Details
Severity:
Frontrunning Attack Vulnerability
Summary
The lending may be frontrunned by the lenders.
Vulnerability Details
The setPool function call may be executed before the borrow function call (frontrunned) and the pool rules may be changed to the different ones that are expected by the borrower.
Impact
The borrower may change the interest rate and the borrower will have to pay more than was expected.
Tools Used
Manual review
Recommendations
Add the expectedInterestRate parameter to the borrow function and verify if it is the same as the current pool interestRate value.
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628
USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.