Submission Details
Severity: high
InvalidAttacker can repeatedly call the function `repayBadDebtWithReserves` before the state changes are completed, manipulate the contract's state, drain its reserves/disrupt its normal operation.
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
39438 USDC / LOC
High Medium
14,000 USDC
Low
1,000 USDC
Judges
1,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Community Judging
Submissions are being reviewed by the community.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.