If `LiquidaitonPoolManager.protocol` is blacklisted from a token in `TokenManager` token, then no vault can be liquidated
Description
If a token gets blacklisted from LiquidaitonPoolManager.protocol, which is an immutable variable, it can lead to a scenario where no vaults are liquidatable until the token is also blacklisted from TokenManager. Blacklisting a token from the token manager would signify that it's no longer considered as collateral, potentially triggering extensive liquidations.
Impact
Possibility of DOS through liquidations if at least one whitelisted token blacklists LiquidaitonPoolManager.protocol.
Recommended mitigation
Transform
protocolinto a normal state variable.Implement a
setProtocolfunction to enable changing its value.In case
LiquidationPoolManager.forwardRemainingRewardsreverts with a specific token, throw a custom error indicating the token responsible for the revert.
An off-chain bot can monitor this error and automatically update protocol value accordingly.
Lead Judging Commences
blacklist-dos
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.