Assessment reportsPublic findings
Back to Zellic site
↗
Assessment reports>Suilend>Threat Model>Function update_reserve_config
GeneralOverview
Findings
Medium (2)
DiscussionUse of APR in configurationLiquidate maximum percentage is weightedDesync between reserve and obligation interest
Threat ModelWhat are threat models?1-lending_market
3-reserveBasic functionFunction update_reserve_configFunction update_priceFunction compound_interestFunction claim_feesFunction deposit_liquidity_and_mint_ctokensFunction redeem_ctokensFunction borrow_liquidityFunction repay_liquidityFunction deposit_ctokensFunction withdraw_ctokens
4-obligation
Audit ResultsSummary

Function update_reserve_config

There is a function that updates the configuration parameters of the reserve. There are no capability checks in this function, but it is marked as a friend function and is called from functions that do perform capability checks. The reserve config can be updated here without further checks.

Zellic © 2025Back to top ↑