Core Contracts

Summary

The function liquidate borrower should not have a when not paused modifier

Vulnerability Details

The function liquidateborrow is a permissoned function that has a whennotpaused modifier. This can be a problem because the owner is a trusted actor. If an emergency situation arises where some users need to be liquidated, then that action would not be possible

Impact

Emergency permissed actions that would involve liquidating some users, would not be possible

Tools Used

manual review

Recommendations

Remove the whennotpuased modifier on the function liquidate borrower