Core Contracts

Regnum Aurum Acquisition Corp
HardhatReal World AssetsNFT
77,280 USDC
View results
Submission Details
Severity: high
Valid

RAAC NFTs are stuck in StabilityPool

Summary

RAAC NFTs are stuck in StabilityPool.

Vulnerability Details

When a lending pool borrower is liquidated, their deposited nfts are transferred to StabilityPool.

LendingPool::finalizeLiquidation()

// Transfer NFTs to Stability Pool
for (uint256 i = 0; i < user.nftTokenIds.length; i++) {
uint256 tokenId = user.nftTokenIds[i];
user.depositedNFTs[tokenId] = false;
raacNFT.transferFrom(address(this), stabilityPool, tokenId);
}

However, this is no way to withdraw the nfts from StabilityPool.

Impact

RAAC NFTs are stuck in StabilityPool.

Tools Used

Manual Review

Recommendations

Implement functionalities to withdraw RAAC NFTs from StabilityPool.

Updates

Lead Judging Commences

inallhonesty Lead Judge 7 months ago
Submission Judgement Published
Validated
Assigned finding tags:

Liquidated RAACNFTs are sent to the StabilityPool by LendingPool::finalizeLiquidation where they get stuck

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.

Give us feedback!