Skip to content

Latest commit

 

History

History
37 lines (19 loc) · 689 Bytes

084.md

File metadata and controls

37 lines (19 loc) · 689 Bytes

Prehistoric Cobalt Aphid

Medium

Lending Pool redemptions should not be pausable as per the frozen consistency

Summary

Lending Pool paused affects redemptions, when it should not, as is the case for frozen, which does not affect redemptions.

Root Cause

In LendingPool:85, redemptions are paused.

Internal Pre-conditions

None.

External Pre-conditions

None.

Attack Path

  1. LendingPool is paused DoSing redemptions.

Impact

DoS Lending Pool redemptions.

PoC

See link.

Mitigation

Remove the notPaused modifier from LendingPool:redeem().