NFT Token will be stuck in the StabilityPool.sol contract after Liquidation
Summary
After a liquidation occurs, the NFT token becomes permanently stuck in the StabilityPool.sol contract.
Vulnerability Details
The contract lacks functions that allow it to transfer or interact with the NFT in a way that enables any meaningful economic activity. As a result, the token remains locked within the contract with no way to recover or utilize it.
Impact
The protocol loses ownership of the NFT and its associated value, preventing it from generating revenue or leveraging the asset for economic purposes. This creates a high impact scenario.
Tools Used
Manual Review
Recommendations
Implement a function, accessible only to the contract owner, that allows the transfer of the NFT token when necessary. This will ensure that the asset remains usable and does not become permanently locked within the contract.
Lead Judging Commences
Liquidated RAACNFTs are sent to the StabilityPool by LendingPool::finalizeLiquidation where they get stuck
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.