V3Vault.sol implements a daily limit on the total amount of debt that can be issued. Borrowing decreases the available daily amounts left, while repayments increase it.
Problem was that liquidations did not increase the borrow limit (like repayments), preventing funds returned to the protocol from being utilized
Mitigation
PR-11 successfully mitigates the original issue by incrementing dailyDebtIncreaseLimitLeft inside liquidate() and also adds daily limit logic to a few other relevant functions
Lines of code
Vulnerability details
C4 Issue
М-22: dailyDebtIncreaseLimitLeft is not updated in liquidate()
Issue Details
V3Vault.sol
implements a daily limit on the total amount of debt that can be issued. Borrowing decreases the available daily amounts left, while repayments increase it.Problem was that liquidations did not increase the borrow limit (like repayments), preventing funds returned to the protocol from being utilized
Mitigation
PR-11 successfully mitigates the original issue by incrementing
dailyDebtIncreaseLimitLeft
insideliquidate()
and also adds daily limit logic to a few other relevant functionsConclusion
Mitigation Confirmed