Submission Details
Severity:
`balanceIncrease` incorrectly calculated on DebtToken, using rayMul() twice
Vulnerability Details
At DebtToken::mint(), the balanceIncrease is wrongly calculated as the code does a rayMul() twice over the scaledBalance of a user.
This happens because when fetching scaledBalance here. Balance of is called which already multiplies by index, see here.
And then in the next lines of code, if some debt was accrued and a balanceIncrease must be calculated the code uses the same scaledBalance multiplied again, see here.
Impact
User is minted more accrued debt than it should.
Recommendations
Only do the rayMul() once when calculating the balanceIncrease.
Updates
Lead Judging Commences
inallhonesty 3 months ago
Submission Judgement Published Assigned finding tags:
DebtToken::mint miscalculates debt by applying interest twice, inflating borrow amounts and risking premature liquidations
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.