Liquidation system does not work
Summary
Once a user is liquidated, collateral NFT is transferred to the stability pool however the stability pool lacks the call to liquidate the NFT, making the NFT stuck and protocol is unable to cover debt by liquidating NFTs.
Vulnerability Details
Whenever a user needs to be liquidated, after certain conditions are met, stability pool will finalize liquidation. This will transfer the NFT to stability pool to liquidate it.
The stability pool contract does not have a call to NFTLiquidator's liquidateNFT function.
Impact
Protocol will not be able to cover bad debt and liquidation all around does not work.
Recommendations
N/A
Lead Judging Commences
Liquidated RAACNFTs are sent to the StabilityPool by LendingPool::finalizeLiquidation where they get stuck
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.