Submission Details
Severity:
Attacker can make a large deposit to reach the depositcap to prevent other users from depositing that type of collateral as margin
Vulnerability Details
All collateral tokens have an associated depositCap
There is a reverting check in depositMargin which forcefully enforces the limit as follows
_requireEnoughDepositCap(collateralType, amountX18, depositCapX18, totalCollateralDepositedX18);
An attacker can take advantage of this by performing a large deposit of margin for that collateral token to reach the limit and block other users from depositing that collateral
Impact
Other users cannot deposit that type of collateral
Zaros will lose potential users because they cannot deposit their preferred collateral
Tools Used
Manual Review
Recommendations
Do not keep a limit, else acknowledge this issue
Updates
Prize pool breakdown
Total prize
60,000 USDC
nSLOC
2,87821 USDC / LOC
50,000 USDC
5,500 USDC
4,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.