ebtc-protocol/ebtc

C4 Prep Content

Closed this issue · 1 comments

Fundamentals Stack

  • intro video
  • borrowing operations (open / adjust / close)
  • redemptions
  • liquidations (partial / full / batch)
  • price feed

Exploit Stack

  • whale sniper (different methods of doing it)
    • grace period
  • NICR sorting debt redistribution issue (how it happens, what it results in)

all known issues should be ack'd as well

Current List of Known Issues

We understand some rounding errors can happen
For that reason Badger will open a CDP with at least 2stETH of Collateral and close to 0 debt as a way to ensure that rounding errors happen against the DAOs CDP
The DAOs CDP will also be the last CDP open
It will be re-opened and kept opened

TO FIX:
https://github.com/cantinasec/review-badgerdao/issues/32

KNOWN:

https://github.com/cantinasec/review-badgerdao/issues/33

stETH can be rugged via an upgrade
We acknowledge that and understand that’s a risk

——

The tokens are StETH and eBTC

They do not require safeTransfer nor SafeApprove

——

  • Front-running to DOS
  • Flashloan Limits can be bypassed

——

Bootstrap Period gone or w/e

——

Off by one in ICR vs TCR vs Liquity

We don’t believe it makes a radical difference and actually is safer as it

——

Grace Period may not be triggered immediately so Recovery Mode Liquidations may be slightly delayed