@taichiaudit Founder | Whitehat doing mediations @Immunefi | Core Member @DeFiHackLabs

GMT+8
Joined January 2018
Easter egg trigged
11 crit/high reports submitted to the same program, 3 dups, others waiting review馃ぃ
6
43
1,967
Paid $250 bucks for a mediation and got closed after 25 minutes with this response, stay away from this scam. Do not pay for mediation.
8
1
3
90
5,825
Replying to @chrisdior777
Need to be a good lawyer to get beg bounty
1
6
104
Glad to join the @HackenProof Vanguard program! Will spend more time hunting bugs on HP and share knowledge with the community馃
2
1
29
1,536
Replying to @brandon_shi
Immunefi triaged ones like this?
61
Passed Daml fundamentals cert exam馃榿Thanks @digitalasset for the great intro course
2
1
23
1,711
Translation: you passed verification but we won't allow you to do your regular job, what you gonna do about it kid?
2
1
7
1,462
There is a second bug that makes this path reachable much more easily: the insolvency gate is broken. The comments say liquidation should depend on the borrower鈥檚 shortfall (the underwater amount), but calculateDiscountedRepayToEvenAmount() reads the target account鈥檚 shortfall and then never uses it. You can ctrl+f for accountShortfall_TargetUser and see it is not used anywhere in the contract. Instead, the close cap (the maximum amount of the borrower鈥檚 debt that this liquidation is allowed to repay in one call) is effectively derived from close factor and borrow balance.
1
1
180