AuctionLoanLiquidator.sol#L285
LiquidationDistributor.sol#L88
MultiSourceLoan.sol#L946
Some tokens like ERC777 has a callhook on receiver address. If these tokens are used in a loan, it could allow attacker to force liquidation/repayment to fail. For example, the function settleAuction() transfer the fee to originator. The originator could be an contract that will revert when receiving token transfer, making it impossible for auction to settle.
