Security and Attack Vectors

  1. Gradual Fund Integration:

  • When users deposit in Earn or sell ERC20s to MortgageFi, the contracts stream the funds over 3 days

  • This prevents sudden large influxes of funds that could potentially exploit the system

  • Implemented through the doUpdate function in the mortgagefipool contract

  1. No Direct Lending of Deposited Stablecoins:

  • Stablecoins from Earn users are not available for direct lending

  • They are used exclusively to purchase ERC20s from sellers, maintaining system integrity

Last updated