Submission Details
Severity:
seizeLoan() and repay() can rearrange the index of arrays
Summary
seizeLoan() and repay() can rearrange the index of arrays
Vulnerability Details
seizeLoan() and repay() both have this line:
delete loans[loanId]
`
Because of this, the index of the array `loans` got reorder, making all the ids after is not at right intended index of the array
## Impact
Bacause of this, users who got the transaction already in the mempool, or user who call it itself, or users who is not acknowledge the change of the reorders, can accidentally make action to wrong intention id, causing losing token
## Tools Used
Manual review
## Recommendations
Use mapping
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.