Submitted by cmichel
Comptroller.sol#L1491
The _setPoolCollateralFactors function does not check that the collateral factor is < 100%.
Its possible that its set to 200% and then borrows more than the collateral is worth, stealing from the pool.
Disable the possibility of ever having a collateral factor > 100% by checking:
0xdramaone (Duality Focus) confirmed, but disagreed with Medium severity and commented:
Jack the Pug (judge) commented:
0xdramaone (Duality Focus) resolved
