Platform: Code4rena
Start Date: 04/03/2024
Pot Size: $88,500 USDC
Total HM: 31
Participants: 105
Period: 11 days
Judge: ronnyx2017
Total Solo HM: 7
Id: 342
League: ETH
Rank: 102/105
Findings: 1
Award: $3.35
🌟 Selected for report: 0
🚀 Solo Findings: 0
🌟 Selected for report: kfx
Also found by: 0x175, 0xAlix2, 0xjuan, AMOW, Aymen0909, CaeraDenoir, Giorgio, JCN, JecikPo, JohnSmith, Norah, SpicyMeatball, alexander_orjustalex, atoko, erosjohn, falconhoof, givn, grearlake, jnforja, kinda_very_good, lanrebayode77, nmirchev8, shaka, web3Tycoon, zxriptor
3.3501 USDC - $3.35
https://github.com/code-423n4/2024-03-revert-lend/blob/main/src/V3Vault.sol#L680-L757
Similar to many lending protocols, the Revert Lend protocol has a feature allowing one user to liquidate another. The purpose of this liquidation mechanism is to settle outstanding loans and maintain protocol stability. However, a user eligible for liquidation can exploit this process by executing a DoS attack. This involves front-running the liquidate()
intended for their liquidation, by calling the borrow()
with a minimal amount and changing their debtShares
, which reverts the liquidation.
Manual review
DoS
#0 - c4-pre-sort
2024-03-18T18:15:22Z
0xEVom marked the issue as insufficient quality report
#1 - c4-pre-sort
2024-03-18T18:15:32Z
0xEVom marked the issue as duplicate of #231
#2 - c4-pre-sort
2024-03-22T12:02:39Z
0xEVom marked the issue as duplicate of #222
#3 - c4-judge
2024-03-31T14:47:29Z
jhsagd76 changed the severity to 2 (Med Risk)
#4 - c4-judge
2024-03-31T16:06:14Z
jhsagd76 marked the issue as satisfactory