Within the borrow function from Lender.sol, _updatePoolBalance is called using the following arguments: poolId, pools[poolId].poolBalance - debt. There is no need to access the state through pools[poolId].poolBalance given that on line 238 we cache the pools[poolId] inside the pool variable.
The _updatePoolBalance should be called with the following arguments: poolId, pool.poolBalance - debt.
This is especially important given that this happens within a for loop.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.