20,000 USDC
View results
Submission Details
Severity: high
Valid

Not checking collateralToken mismatch in buyLoan function.

Summary

Not checking collateralToken mismatch in buyLoan function.

Vulnerability Details

Not checking if the lender's collateral Token is not equal to the pool's collateral token.

Impact

Breaking logic.

Tools Used

Recommendations

Check the equality of the loan collateral Token and the pool collateral Token:

if (pool.collateralToken != loan.collateralToken) revert TokenMismatch();

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.