BugHunter101 - The lender can call the rollLoan() to increase the amount of repayments required, resulting in the inability of the borrower to repay the debt

[sherlock-admin2]

BugHunter101

medium

The lender can call the rollLoan() to increase the amount of repayments required, resulting in the inability of the borrower to repay the debt

Summary

The lender can call the rollLoan() to increase the amount of repayments required, resulting in the inability of the borrower to repay the debt

Imagine the following scenario:

The lender has a premonition that the price of the collateral may rise, and the price of the debt token may fall, so before the price of the collateral rises, the lender increases the repayment amount by calling function rollLoan(),, causing the borrower to be unable to repay the loan until the loan period expires , the lender takes away the collateral

Vulnerability Detail

https://github.com/sherlock-audit/2023-08-cooler/blob/main/Cooler/src/Cooler.sol#L151

Impact

The lender can call the rollLoan() to increase the amount of repayments required, resulting in the inability of the borrower to repay the debt

Code Snippet

https://github.com/sherlock-audit/2023-08-cooler/blob/main/Cooler/src/Cooler.sol#L151

Tool used

Manual Review

Recommendation

Set rollLoan() can be call only by borrower.

Duplicate of #26