Submission Details
Severity:
User can DoS pool lender's withdrawals.
Summary
Adversary can DoS pool withdrawals.
Vulnerability Details
Upon a lender attempting to withdraw funds from their pool, a malicious user can front-run them and borrow all liquidity. Then the user can back-run the pool lender's transaction and repay the loan. Because of the small duration of the loan, the interest is negligible and the pool lender cannot withdraw their funds.
Impact
Pool lender cannot withdraw their funds.
Tools Used
Manual review
Recommendations
Add a minimum interest fee, despite the length of the borrow in order to make this attack costly for the attacker.
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628
USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.