Skip to content

v10 RC6

Compare
Choose a tag to compare
@grandizzy grandizzy released this 13 Jul 05:43
· 9 commits to master since this release
febd576

v0.10.0 Release Candidate 6

Audit fixes

Sherlock 2nd contest

  • SHERLOCK-111 (Pool): Wrong Inflator used in calculating HTP to determine accrualIndex (#916)
  • SHERLOCK-110 (Pool): Debt write off can be prohibited by HPB depositor by continuously allocating settlement blocking dust deposits in the higher buckets (#909 #919)
  • SHERLOCK-107, 86, 82, 113 (Pool): redesign kickWithDeposit functionality (#894)
  • SHERLOCK-106 (Pool): Settlement can be called when auction period isn't concluded, allowing HPB depositors to game bad debt settlements (#902)
  • SHERLOCK-104 (Pool): Mathematical Discrepancies in equations used for calculating Interest Rates (#903)
  • SHERLOCK-88 (Pool): LenderActions's moveQuoteToken can create a total debt undercoverage (#901)
  • SHERLOCK-87, 84 (Pool): moveQuoteToken updates pool state using intermediary LUP, biasing pool's interest rate calculations (#891)
  • SHERLOCK-85 (Pool): Limit index isn't checked in repayDebt, so user control is void (#914)
  • SHERLOCK-72 (Pool): Lenders lose interests and pay deposit fees due to no slippage control (#918)
  • SHERLOCK-31 (PositionManager): PositionManager & PermitERC721 do not comply with EIP-4494 (#907)

Bug fixes

  • Bug fix (Pool): t0DebtInAuction accumulator becomes outdated if quote token amount calculated to repay is rounded down to 0
  • Bug fix (Pool): use better precision (mulDiv) when calculating quote tokens in _calculateTakeFlowsAndBondChange in order to avoid discrepancies of exchange rate when collateral token has lower precision than quote token

Improvements

  • Revert position NFT transfer lock (which breaks automation / 3rd party integrations) (#875)
  • Readable order of operations (#917)

Full changelog: v0.10.0-rc5...v0.10.0-rc6