Zivoe audit contest
A public audit contest on Sherlock (lending), completed on 8th April 2024. 0xSimao placed #3. 4 of his findings are published: 4 medium.
What Zivoe is
Zivoe is a real-world asset credit protocol aiming to disrupt predatory high-interest consumer lending. Leveraging a B2B2C model, Zivoe offers on-chain loans to regulated consumer lending entities, who then use that capital to fund consumer credit products off-chain. These entities then utilise the yield from such products to fulfil their on-chain obligations to Zivoe.
Scope
The Zivoe core: senior and junior tranches, the initial tranche offering, yield distribution and the DAO's credit and liquidity lockers.
Medium severity findings
ZivoeYDL::earningsTrancheuse()always assumes thatdaysBetweenDistributionshave passed, which might not be the case- OCL_ZVE::pushToLockerMulti() will revert due to incorrect assert() statements when interacting with UniswapV2
- When APR late rate is lower than APR, an OCC locker bullet loan borrower can pay way less interests by calling the loan
- Rewards are calculated as distributed even if there are no stakers, locking the rewards forever
The contest