Lines of code
<https://github.com/code-423n4/2022-10-inverse/blob/HEAD/src/DBR.sol#L284-L293&gt;
<https://github.com/code-423n4/2022-10-inverse/blob/HEAD/src/DBR.sol#L133-L138&gt;

Vulnerability details

Impact

although DBR record the accured interest when it increasing, but there is no other operation on it, so if a user borrowed from the protocol, there is no interest chargement of it, and on top of that, the deficitOf function represent the user’s debt condition, it take the accured interest into consideration, if a user’s interest havent process, it may cause a user cannot borrow from the protocol

#Proof of Concept
<https://github.com/code-423n4/2022-10-inverse/blob/HEAD/src/DBR.sol#L284-L293&gt;
<https://github.com/code-423n4/2022-10-inverse/blob/HEAD/src/DBR.sol#L133-L138&gt;

Tools Used

Recommended Mitigation Steps

add change accured interest logic.

The text was updated successfully, but these errors were encountered:

All reactions