User can deposit and loose NFTs while under liquidation.
Summary
A user can deposit an NFT while under liquidation, after this deposit the user's health factor can be above the healthFactorLiquidationThreshold but still isn't able to close their liquidation.
What makes this situation worse is that they can't withdraw this "healthy" NFT, they also can't borrow based on their new collateral, it's basically stuck until the current debt is repaid and if they eventually get liquidated this "healthy" NFT and previous NFTs will all be taken.
Impact
User with healthy collateral to debt ratio can get liquidated and NFTs he has no debt on will be taken.
Tools Used
Manual review
Recommendations
Don't allow users to deposit more NFTs while they are under liquidation.
Lead Judging Commences
Users can deposit NFTs using LendingPool::depositNFT while under liquidation, leading to unfair liquidation of NFTs that weren't part of original position
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.