Submitted by pedroais
The depositCollateral function doesnt check the status of the pool so collateral can be deposited in a finished loan. This can happen by mistake and all funds will be lost.
https://github.com/code-423n4/2021-12-sublime/blob/9df1b7c4247f8631647c7627a8da9bdc16db8b11/contracts/Pool/Pool.sol#L207
Require loan status to be collection or active in the depositCollateral function.
ritik99 (Sublime) disagreed with severity:
0xean (judge) commented:
