Lucene search

K
code423n4Code4renaCODE423N4:2022-10-INVERSE-FINDINGS-ISSUES-274
HistoryOct 29, 2022 - 12:00 a.m.

no interest calculation charging & lp provider reward in market contract

2022-10-2900:00:00
Code4rena
github.com
7
borrower debt
lp provider
interest charging
economic module
protocol

Lines of code
<https://github.com/code-423n4/2022-10-inverse/blob/HEAD/src/DBR.sol#L1-L388&gt;

Vulnerability details

Impact

there is no accrued interest charging for the borrower’ debt, borrower at the same time cannot decrease their accured interest(this bug’s detail is present in my previous finding), and there is also no reward for those lp provider who deposit their token in the market, so your economic module has a fundamental problem, you cannot attract user using your protocol

Proof of Concept

Tools Used

Recommended Mitigation Steps

fix this logic, charge the interest and pay lp provider reward.


The text was updated successfully, but these errors were encountered:

All reactions