Submission Details
Severity:
Improper aToken Handling During DIVA Settlement
Summary
DIVA pool settlement does not account for aToken accrual, leading to incorrect payouts
Vulnerability Details
When a DIVA pool settles, the wrapper converts aTokens back to collateral. However, if settlement occurs before Aave’s interest accrual (e.g., same block), users receive less collateral than deserved
Impact
Users lose yield during pool settlements
Tools Used
Manual analysis of convertToCollateral function
Recommendations
Force aToken interest accrual before DIVA settlement using Aave’s pool.accrueInterest()
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
51929 USDC / LOC
14,000
1,000
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.