Summary

Unhealthy accounts not disallowed from liquidating self

Vulnerability Details

There is no check that an unhealthy account can liquidate themselves

Impact

Low: This is not an ideal working of protocol. Unhealthy account will actually get a 10% bonus in return for liquidating themselves. Unless its the intended design of protocol, this may not be ideal

Tools Used

Manual Analysis

Recommendations

It is recommended in liquidations to perform the following check in liquidate(..) function
if (user == msg.sender) {
revert DSCEngine__MustNotBeSelf(); // or some other appropriate naming of the custom error
}