Submission Details
Severity:
In liquidate() _revertIfHealthFactorIsBroken(msg.sender) can be simply bypassed.
Summary
Last line of liquidate(), _revertIfHealthFactorIsBroken(msg.sender); can simply be bypassed.
Vulnerability Details
Anyone can simply make an account and bypass _revertIfHealthFactorIsBroken(msg.sender);. Since _revertIfHealthFactorIsBroken(msg.sender); does not revert when it does not have DSC minted.
Tools Used
vscode
Recommendations
make only user who provided collateral can liquidate other user.
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
23664 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.