Revert Lend - alexander_orjustalex's results

A lending protocol specifically designed for liquidity providers on Uniswap v3.

General Information

Platform: Code4rena

Start Date: 04/03/2024

Pot Size: $88,500 USDC

Total HM: 31

Participants: 105

Period: 11 days

Judge: ronnyx2017

Total Solo HM: 7

Id: 342

League: ETH

Revert

Findings Distribution

Researcher Performance

Rank: 102/105

Findings: 1

Award: $3.35

🌟 Selected for report: 0

🚀 Solo Findings: 0

Awards

3.3501 USDC - $3.35

Labels

bug
2 (Med Risk)
downgraded by judge
insufficient quality report
satisfactory
:robot:_45_group
duplicate-222

External Links

Lines of code

https://github.com/code-423n4/2024-03-revert-lend/blob/main/src/V3Vault.sol#L680-L757

Vulnerability details

Impact

Similar to many lending protocols, the Revert Lend protocol has a feature allowing one user to liquidate another. The purpose of this liquidation mechanism is to settle outstanding loans and maintain protocol stability. However, a user eligible for liquidation can exploit this process by executing a DoS attack. This involves front-running the liquidate() intended for their liquidation, by calling the borrow() with a minimal amount and changing their debtShares, which reverts the liquidation.

Tools Used

Manual review

Assessed type

DoS

#0 - c4-pre-sort

2024-03-18T18:15:22Z

0xEVom marked the issue as insufficient quality report

#1 - c4-pre-sort

2024-03-18T18:15:32Z

0xEVom marked the issue as duplicate of #231

#2 - c4-pre-sort

2024-03-22T12:02:39Z

0xEVom marked the issue as duplicate of #222

#3 - c4-judge

2024-03-31T14:47:29Z

jhsagd76 changed the severity to 2 (Med Risk)

#4 - c4-judge

2024-03-31T16:06:14Z

jhsagd76 marked the issue as satisfactory

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter