ajna-finance / ajna-core

The Ajna protocol is a non-custodial, peer-to-peer, permissionless lending, borrowing and trading system that requires no governance or external price feeds to function.

https://www.ajna.finance/

Other

31 stars 11 forks source link

Reserves draining through LUP manipulation #957

Closed prateek105 closed 1 year ago

prateek105 commented 1 year ago

Description of change

High level

Add unit test to check dimitri's attack: https://discord.com/channels/991329258754560080/1117857707425280081/1163928597376024718
Unit test result shows attacker losing some quote tokens because of:
- origination fee on loan
- whole deposit being locked due to auction debt (even partial withdraw from top bucket is restricted)