20,000 USDC
View results
Submission Details
Severity: high
Valid

Not checking loan token mismatch in buyLoan function.

Summary

Not checking token mismatch in buyLoan function.

Vulnerability Details

Not checking if the lender's loan token is not equal to the pool's loan token.

Impact

Breaking loan logic.

Tools Used

Recommendations

Check the equality of the loan token and the pool loan token:

if (pool.loanToken != loan.loanToken) revert TokenMismatch();

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.