Submission Details
Severity:
Missing slippage protection in Borrow/Repay
Summary
Interest rate changes between transaction submission and execution are not handled, potentially leading to unexpected outcomes in the RAAC protocol.
Vulnerability Details
The borrow() function uses the current rateData without user-specified limits, which could result in different interest rates being applied than what the user expected.
Impact
This issue can lead to users facing higher interest rates than anticipated, potentially causing financial losses or dissatisfaction.
Tools Used
Manual review
Recommendations
Implement user-specified limits or slippage protection mechanisms.
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.