search

code-423n4 / 2021-09-wildcredit-findings

0 stars 0 forks source link

`setTargetUtilization()` Misleading error message #86

Open code423n4 opened 2 years ago

code423n4 commented 2 years ago

Handle

WatchPug

Vulnerability details

function setTargetUtilization(uint _value) external onlyOwner {
  require(_value < 99e18, "InterestRateModel: _value < 100e18"
  targetUtilization = _value;
  emit NewTargetUtilization(_value);
}

https://github.com/code-423n4/2021-09-wildcredit/blob/main/contracts/InterestRateModel.sol#L60-L64

Error message indicates "InterestRateModel: _value < 100e18"

While it actually checks for _value < 99e18