Submission Details
Severity:
DebtToken::mint mints more than actual debt
Vulnerability Details
In DebtToken::mint we are supposed to provide the actual debt in _mint as it will automatically be scaled inside the overridden _update function.
amountToMint is calculated to pass as a param in Mint event, that is its only use.
Impact
Borrower will have to pay more debt than the actual amount he is supposed to pay
Tools Used
Manual Review
Recommendations
--- _mint(onBehalfOf, amountToMint.toUint128());
+++ _mint(onBehalfOf, amount.toUint128());
Updates
Lead Judging Commences
inallhonesty 7 months ago
Submission Judgement Published Assigned finding tags:
DebtToken::mint miscalculates debt by applying interest twice, inflating borrow amounts and risking premature liquidations
inallhonesty 7 months ago
Submission Judgement Published Assigned finding tags:
DebtToken::mint miscalculates debt by applying interest twice, inflating borrow amounts and risking premature liquidations
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420
USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.