[OZ] H-01

[junkim012]

H-01

• On _transfer, when calculating the amount of normalizedBalance to transfer with supplyFactor, it now includes the accrued per-second interest rate in the supplyFactor.
• Instead of directly querying the $._supplyFactor, it uses the supplyFactor view function which includes the "to-be-accrued" interest rate.
• View function called rather than _accrueInterest for gas savings. The _accrueInterest MUST be called if the function changes the utilization rate of the pool, but _transfer does not.

[openzeppelin-code]

[OZ] H-01

Generated at commit: a6b160172f7bb6b62c692e925394599efc637749

🚨 Report Summary

	Severity Level	Results
Contracts	Critical High Medium Low Note Total	2 2 0 12 40 56
Dependencies	Critical High Medium Low Note Total	0 0 0 0 0 0

---

For more details view the full report in OpenZeppelin Code Inspector

[CarsonCase]

Looks good. Like the use of supplyFactor() view function instead of accruing, was interested if just because _transfer() doesn't change utilization, means that it CAN'T under any circumstance but from what I can see that invariant holds. Would be neat to add to invariant tests however that no call to transfer() changes utilization rate