lendingPool.updateState is updated incorrectly in the function liquidateBorrower(StabilityPool.sol).
Summary
lendingPool.updateState should be updated before userDebt calculation in the function liquidateBorrower. as lendingPool.updateState is updated after userDebt calculation in the function liquidateBorrower,so userDebt calculation will be incorrect.
Vulnerability Details
lendingPool.updateState should be updated before userDebt calculation in the function liquidateBorrower. as lendingPool.updateState is updated after userDebt calculation in the function liquidateBorrower,so userDebt calculation will be incorrect.
Impact
** userDebt calculation will be incorrect in the liquidateBorrower(StabilityPool.sol).**
Tools Used
manual review
Recommendations
update lendingPool.updateState before userDebt calculation in the function liquidateBorrower.
Lead Judging Commences
StabilityPool: liquidateBorrower should call lendingPool.updateState earlier, to ensure the updated usageIndex is used in calculating the scaledUserDebt
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.