v10 RC6
v0.10.0 Release Candidate 6
Audit fixes
Sherlock 2nd contest
- SHERLOCK-111 (Pool): Wrong Inflator used in calculating HTP to determine accrualIndex (#916)
- SHERLOCK-110 (Pool): Debt write off can be prohibited by HPB depositor by continuously allocating settlement blocking dust deposits in the higher buckets (#909 #919)
- SHERLOCK-107, 86, 82, 113 (Pool): redesign
kickWithDeposit
functionality (#894) - SHERLOCK-106 (Pool): Settlement can be called when auction period isn't concluded, allowing HPB depositors to game bad debt settlements (#902)
- SHERLOCK-104 (Pool): Mathematical Discrepancies in equations used for calculating Interest Rates (#903)
- SHERLOCK-88 (Pool): LenderActions's moveQuoteToken can create a total debt undercoverage (#901)
- SHERLOCK-87, 84 (Pool): moveQuoteToken updates pool state using intermediary LUP, biasing pool's interest rate calculations (#891)
- SHERLOCK-85 (Pool): Limit index isn't checked in repayDebt, so user control is void (#914)
- SHERLOCK-72 (Pool): Lenders lose interests and pay deposit fees due to no slippage control (#918)
- SHERLOCK-31 (PositionManager): PositionManager & PermitERC721 do not comply with EIP-4494 (#907)
Bug fixes
- Bug fix (Pool): t0DebtInAuction accumulator becomes outdated if quote token amount calculated to repay is rounded down to 0
- Bug fix (Pool): use better precision (mulDiv) when calculating quote tokens in _calculateTakeFlowsAndBondChange in order to avoid discrepancies of exchange rate when collateral token has lower precision than quote token
Improvements
- Revert position NFT transfer lock (which breaks automation / 3rd party integrations) (#875)
- Readable order of operations (#917)
Full changelog: v0.10.0-rc5...v0.10.0-rc6