if (POSITION_NFT.getOwner(_nftId) != _caller) {
revert InvalidCaller();
}
getOwner seems to be a function which was present in a past codebase doing the same thing as ERC721's ownerOf so ownerOf should be used instead.
Attack Scenario\
No one can liquidate any powerfarm. You can take a freeroll with max leverage and dont fear any liquidation. This can result in bad debt for the system.
Github username: -- Twitter username: -- Submission hash (on-chain): 0x8c418a5f744f3b33e1e0c66bca32338fce2576883d5dea444f9a04be8b97bb69 Severity: high
Description: Description\ In
This check here will always fail
getOwner seems to be a function which was present in a past codebase doing the same thing as ERC721's ownerOf so ownerOf should be used instead.
Attack Scenario\ No one can liquidate any powerfarm. You can take a freeroll with max leverage and dont fear any liquidation. This can result in bad debt for the system.
Attachments
Proof of Concept (PoC) File
Revised Code File (Optional)