Skip to content

Latest commit

 

History

History
26 lines (22 loc) · 1.03 KB

Contract Owner Can Arbitrarily Change Minting Fees and Interest Rates.md

File metadata and controls

26 lines (22 loc) · 1.03 KB

The issueFeeRate and interestRate variables can both be changed by the EtherCollateral contract owner after loans have been opened.

As a result, the owner can control fees such as they equal/exceed the collateral for any given loan.

Recommendation:

While "dynamic" interest rates are common, we recommend considering the minting fee ( issueFeeRate ) to be a constant that cannot be changed by the owner.


Slide Screenshot

069.jpg


Slide Text

  • Sigma Prime EtherCollateral Finding 3
  • Configuration
  • Medium Severity
  • Contract Owner
  • Change Fees & Interest
  • Prevent Changes

References


Tags