Skip to content

Latest commit

 

History

History
19 lines (9 loc) · 1018 Bytes

061.md

File metadata and controls

19 lines (9 loc) · 1018 Bytes

Tiny Gingerbread Tarantula

Medium

Mismatched Array Length Limits in matchOffersV3 and DebitaV3Loan initialize Functions

Summary

The matchOffersV3 function in the DebitaV3Aggregator.sol contract checks that the number of lend orders does not exceed 100. However, the initialize function in the DebitaV3Loan.sol contract checks that the number of accepted offers does not exceed 30. This inconsistency can cause valid transactions with more than 30 offers to fail during the initialization of a loan.

Impact

While the bug does not pose a security risk, it disrupts expected functionality and may lead to user dissatisfaction or inefficiencies of the protocol as it does not lead to a single source of truth.

Mitigation

No response