Submission Details
Severity:
Stability pool lacks of mechanism to handle liquidations
Summary
The stability pool can trigger liqudiations and then auction the foreclosed assets. The winning bid is transferred to the stability pool, which currently is native ETH. The contract lacks of receive and fallback functions so it won't be able to receive such funds. Additionally there is no mechanism in place to convert the native assets nor the RTokens into crvUsd to cover the liquidated user debt in the lending pool.
Vulnerability Details
Impact
Tools Used
Manual review.
Recommendations
Complete the liquidation logic implementing the missing functionalities.
Updates
Lead Judging Commences
inallhonesty 7 months ago
Submission Judgement Published Assigned finding tags:
StabilityPool misses receive/fallback breaking the integration with NFTLiquidator
inallhonesty 7 months ago
Submission Judgement Published Assigned finding tags:
StabilityPool misses receive/fallback breaking the integration with NFTLiquidator
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420
USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.