Core Contracts
Regnum Aurum Acquisition Corp
HardhatReal World AssetsNFT
77,280 USDC
View results
Previous Next
Submission Details
Severity: high
Invalid

Missing Input Validation for Health Factor Liquidation Threshold

aremson

Vulnerability Details

The setParameter function in

allows the contract owner to modify critical protocol parameters, including the healthFactorLiquidationThreshold. Unlike other parameters in the same function, this threshold lacks proper boundary validation, potentially allowing it to be set to unsafe values

Affected Function

else if (param == OwnerParameter.HealthFactorLiquidationThreshold) {healthFactorLiquidationThreshold = newValue;emit LiquidationParametersUpdated(liquidationThreshold, healthFactorLiquidationThreshold, liquidationGracePeriod);}

Impact

  • If too low, users could get liquidated unnecessarily, causing fund losses.

  • If too high, liquidations might never trigger, leading to bad debt.

  • No upper/lower bound allows setting arbitrary values

Tools Used

manual review

Recommendations

Add Immediate Input validation

Updates

Lead Judging Commences

inallhonesty Lead Judge 4 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity
inallhonesty Lead Judge 4 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.