Merge pull request #243 from Ithil-protocol/audit-fix-m1

fix m1
Ithil-protocol · Jan 10, 2024 · e49eac7 · e49eac7
2 parents b5d2ab0 + bb19833
commit e49eac7
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/services/DebitService.sol b/src/services/DebitService.sol
@@ -136,7 +136,9 @@ abstract contract DebitService is Service, BaseRiskModel {
             // We instead allow the user to liquidate its own position without vault loss
             // Because it is not a vulnerability even if the user manipulated the quoter on purpose to experience a loss
             if (
-                obtained[index] < agreement.loans[index].amount && msg.sender != liquidator && liquidator != address(0)
+                obtained[index] < agreement.loans[index].amount + dueFees[index] &&
+                msg.sender != liquidator &&
+                liquidator != address(0)
             ) {
                 revert LossByArbitraryAddress();
             }