> For the complete documentation index, see [llms.txt](https://simones-organization-4.gitbook.io/hackbook-of-a-hacker/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://simones-organization-4.gitbook.io/hackbook-of-a-hacker/smart-contracts-security/code4rena/medium-risk-findings/missing-upper-limit.md).

# Missing Upper Limit

Submitted by (11) MiloTruck, also found by \_\_141345\_\_, 0x52, 8olidity, cccz, Ch\_301, codexploder, cryptonue, hansfriese, Ruhum, and sseefried

### Summary:

<https://code4rena.com/reports/2022-08-rigor/#m-02-missing-upper-limit-definition-in-replacelenderfee-of-homefisol>

The admin of the `HomeFi` contract can set `lenderFee` to greater than 100%, forcing calls to `lendToProject()` to all projects created in the future to revert.

### Mitigation:

Consider adding a reasonable fee rate bounds checks in the `replaceLenderFee()` function. This would prevent potential griefing and increase the trust of users in the contract.