Submission Details
Severity:
[H-10] currentLiquidityRate and currentUsageRate in ReserveLibrary/LendingPool cannot be set
Summary
The currentLiquidityRate and currentUsageRate in ReserveLibrary/LendingPool cannot be set due to a lack of setter functions and furthermore they are not initialized anywhere, so the interest rates are set to 0 and the usageIndex and liquidityIndex are always equal to 100% (in RAY units).
Vulnerability Details
Impact
The indices representing interest will never change, compromising the utility of the LendingPool and the protocol as a whole.
Tools Used
Manual review.
Recommendations
Either set an initial rate in the constructor of the LendingPool or add a setter-like function for the two indices.
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420
USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.