Immunefi Audit CompetitionsTerm Structure Institutional | IOP
Reports by Severity
Critical
- 46819 - [SC - Critical] direct theft of users funds when expired loan get liquidated
- 46903 - [SC - Critical] malicious borrower can take theft of other borrower collateral
- 47112 - [SC - Critical] addCollateral causes double economic loss through premature asset transfer and inflated settlement requirements
- 47115 - [SC - Critical] Missing Settlement Status Validation in Loan Operations
High
- 46893 - [SC - High] settlement functionality can be break forever and blocking settlement actions.
- 47008 - [SC - High] any users with expired loan(not settled) can take theft of lenders collateral when the collateral price increase
- 47118 - [SC - High] Incorrect Allowance Validation in addCollateralBeforeSettle
Medium
- 46608 - [SC - Medium] Any call to the repay function can potentially be front-run by a malicious actor, lead to prevent users from repaying on time.
- 47122 - [SC - Medium] Array Length Mismatch Enables Partial Settlement Processing
- 47125 - [SC - Medium] Cross-Chain Signature Replay Attack in Settlement Contract
Reports by Type
Smart Contract
- 46819 - [SC - Critical] direct theft of users funds when expired loan get liquidated
- 46608 - [SC - Medium] Any call to the repay function can potentially be front-run by a malicious actor, lead to prevent users from repaying on time.
- 46903 - [SC - Critical] malicious borrower can take theft of other borrower collateral
- 46893 - [SC - High] settlement functionality can be break forever and blocking settlement actions.
- 47008 - [SC - High] any users with expired loan(not settled) can take theft of lenders collateral when the collateral price increase
- 47009 - [SC - Low] Any position can be closed (by repaying the debt) even after the maturity date has passed
- 47100 - [SC - Insight] some checks should be added even if the operator checks each input parameters
- 47112 - [SC - Critical] addCollateral causes double economic loss through premature asset transfer and inflated settlement requirements
- 47115 - [SC - Critical] Missing Settlement Status Validation in Loan Operations
- 47118 - [SC - High] Incorrect Allowance Validation in addCollateralBeforeSettle
- 47122 - [SC - Medium] Array Length Mismatch Enables Partial Settlement Processing
- 47124 - [SC - Insight] Minimum Debt Value Updates Trigger Instant Liquidation Condition Changes
- 47125 - [SC - Medium] Cross-Chain Signature Replay Attack in Settlement Contract