Submission Details
Severity:
Prevent users to use tokens that are not mapped
Summary
Anyone can call the function depositCollateral, if the user sends a token that is not mapped on the oracle, the user will deposit a collateral that has no value for the protocol, depending on how is the state of his balance, he maybe is not even capable of redeeming it.
Vulnerability Details
Impact
None, usability
Tools Used
Recommendations
In depositCollateral function verify if the tokenCollateralAddress is in the s_collateralTokens array, if not, revert the transaction with a new error
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
23664 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.