Submission Details
Severity:
[M-05] It is allowed any token for redeems collateral functions
Summary
Redeem functions do not make use of the isAllowedToken modifier
Vulnerability Details
The redeemCollateralForDsc function allows burning DSC without verifying that the tokens used as collateral are allowed.
Allowing the burning of tokens but without returning the collateralized tokens because the transaction will fail since there will be no balance of the unlisted tokens. Without the user knowing what happened and burning their tokens.
Impact
High
Tools Used
Manual code reviw
Recommendations
Use isAllowedToken modifier for both functions.
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
23664 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.