Submission Details
Severity:
Incorrect calculation of Lending Vault capacity
Summary
The additionalCapacity() function checks whether lending vaults have sufficient capacity to meet the funding demands for a new position based on the proposed depositValue().
There is an error in the calculation of the _maxTokenBLending variable
Vulnerability Details
Impact
Tools Used
Recommendations
uint256 _maxTokenBLending = convertToUsdValue(
self,
address(self.tokenB),
self.tokenBLendingVault.totalAvailableAsset()
) * SAFE_MULTIPLIER
/ (self.leverage * (1e18 - _tokenAWeight) / SAFE_MULTIPLIER);
Prize pool breakdown
Total prize
35,000 USDC
nSLOC
2,28915 USDC / LOC
33,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.