Submission Details
Severity:
Tokens with more than 18 will break the pool.
Summary
If protocol ever adds token with more than 18 it will completly break the pool.
Vulnerability details
If token with more than 18 decimals will be added as accepted token it will ruin the liquidation pool and the liquidation process itself.
It all because of (18 - asset.token.dec) subtraction in distributeAssets. This will always revert and not allow for liquidation and assets distribution.
Impact
Pool will be broken due to incompatibility.
Recommendations
Do not add tokens with more than 18 decimals or change the calculation logic to account for such scenario.
Updates
Lead Judging Commences
hrishibhat almost 2 years ago
Submission Judgement Published Reason: Non-acceptable severity
Assigned finding tags:
informational/invalid
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
60933
USDC / LOC
17,500 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.