Lender.setLenderFee(), Lender.setBorrowerFee() and Lender.setFeeReceiver() are missing events for critical parameters changing operations by Owner.
The Owner can change Lender Fees, Borrower Fees and Fee Receiver at any times which can cause arm to users if they are not aware of the changes when making a new transaction.
These 3 critical functions should emit an event when they are called by the Owner to change critical parameters.
Users could send a transaction thinking the Lender fees or Borrower fees are the values set at deployment(1000, 50), but since the Owner has changed the values but no events were emitted, the users aren't aware.
Manual review
Emit events and provide time lock for users to react.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.