Submission Details
Severity:
No way to UPDATE `LendingPool` address in `StabilityPool` contract
Vulnerability Details
The lendingPool contract has a dedicated function through which, we can update the stabilityPool contract whenever an upgrade is NEEDED.
However, the same cannot be done in StabilityPool as there is no dedicated function to update this address .
Tools Used
Manual
Recommendations
Consider adding a dedicated function which can update the lendingPool address.
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420
USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.