Submission Details
Severity:
Inconsistent Auction Time End
Summary
It is allowed to the lender to seize the loan in the last second of the auction.
Vulnerability Details
It is checked in the code if block.timestamp < loan.auctionStartTimestamp + loan.auctionLength.
Impact
This will allow the lender to seize the loan in the last second of the auction which violate the requirements. In case if the loan.auctionLength is set to 1, the lender will be allowed to skip the auction in this way and seize the loan.
Tools Used
Manual review
Recommendations
Replace the mentioned verification with the block.timestamp <= loan.auctionStartTimestamp + loan.auctionLength.
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.