Submitted by bin2chen
In mergeTranches(), the methods code implementation is as follows:
As shown above, this method lacks reentrancy protection, which could allow reentrancy attacks to manipulate the _loans[].
Example: Suppose _loans[1] = {NFT = 1}
There will be _loans[2] and _loans[3], both containing NFT=1.
Note: Both Loans s lender are all himself:
Add nonReentrant:
Context
0xend (Gondi) confirmed
Gondi mitigated:
Status: Mitigation confirmed. Full details in reports from oakcobalt, minhquanym and bin2chen.
