092.md

Obedient Umber Osprey

Medium

No nonReentrant in _setInterestRateModel

Summary

there is no nonReentrant modifier in _setInterestRateModel

Root Cause

https://github.com/sherlock-audit/2024-12-numa-audit/blob/main/Numa/contracts/lending/CToken.sol#L1550

function _setInterestRateModel( InterestRateModel newInterestRateModel ) public override returns (uint) { accrueInterest(); // _setInterestRateModelFresh emits interest-rate-model-update-specific logs on errors, so we don't need to. return _setInterestRateModelFresh(newInterestRateModel); }

Internal pre-conditions

No response

External pre-conditions

No response

Attack Path

No response

Impact

No response

PoC

No response

Mitigation

use nonReentrant in _setInterestRateModel .