Incorrect Debt Calculation Due to Outdated Reserve State
Summary
The function LiquidityPool::getUserDebt retrieves a user's total debt, but it may return incorrect data if the reserve state (specifically reserve.usageIndex) has not been updated before the debt calculation.
Vulnerability Details
The function fetches the reserve.usageIndex without ensuring that the reserve state is up-to-date. If the usageIndex is outdated, the debt calculation will return incorrect values, leading to inaccurate debt data.
Impact
The impact of this issue is that users may receive incorrect debt values, which can affect financial operations such as debt management, liquidation checks, or balance updates. While the system won't fail outright, the incorrect data may lead to misleading financial decisions.
Tools Used
Manual review
Recommendations
Ensure that the reserve state, particularly reserve.usageIndex, is updated before performing any debt calculations to avoid displaying stale data.
Lead Judging Commences
LendingPool::getUserDebt uses stale usageIndex without accounting for accrued interest since last update
LendingPool::getUserDebt uses stale usageIndex without accounting for accrued interest since last update
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.