Submission Details
Severity:
NFTs stuck in Stability Pool
Summary
In the LendingPool contract when finalizing a liquidation the LendingPool sends the RAACNFT tokens of the liquidated user's position to the StabilityPool. The problem is that the StabilityPool contract doesn't have any functionality to handle those tokens, so esentially they are stuck forever.
for (uint256 i = 0; i < user.nftTokenIds.length; i++) {
uint256 tokenId = user.nftTokenIds[i];
user.depositedNFTs[tokenId] = false;
raacNFT.transferFrom(address(this), stabilityPool, tokenId);
}
Impact
Stuck NFTs
Tools Used
Manual review
Recommendations
Add functionality to the StabilityPool to handle these tokens.
Updates
Lead Judging Commences
inallhonesty 7 months ago
Submission Judgement Published Assigned finding tags:
Liquidated RAACNFTs are sent to the StabilityPool by LendingPool::finalizeLiquidation where they get stuck
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420
USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.