@ensuro/core 2.8.0 → 2.8.2

package/contracts/PolicyPool.sol

@@ -11,6 +11,7 @@ import {UUPSUpgradeable} from "@openzeppelin/contracts-upgradeable/proxy/utils/U
 
 import {IAccessManager} from "./interfaces/IAccessManager.sol";
 import {IEToken} from "./interfaces/IEToken.sol";
+import {IPolicyHolderV2} from "./interfaces/IPolicyHolderV2.sol";
 import {IPolicyHolder} from "./interfaces/IPolicyHolder.sol";
 import {IPolicyPool} from "./interfaces/IPolicyPool.sol";
 import {IPolicyPoolComponent} from "./interfaces/IPolicyPoolComponent.sol";
@@ -43,6 +44,8 @@ contract PolicyPool is IPolicyPool, PausableUpgradeable, UUPSUpgradeable, ERC721
   bytes32 public constant LEVEL2_ROLE = keccak256("LEVEL2_ROLE");
   bytes32 public constant LEVEL3_ROLE = keccak256("LEVEL3_ROLE");
 
+  uint256 internal constant HOLDER_GAS_LIMIT = 150000;
+
   /**
    * @dev {AccessManager} that handles the access permissions for the PolicyPool and its components.
    */
@@ -125,6 +128,98 @@ contract PolicyPool is IPolicyPool, PausableUpgradeable, UUPSUpgradeable, ERC721
    */
   string internal _nftBaseURI;
 
+  /**
+   * @dev Constructor error when address(0) is sent as `access()`
+   */
+  error NoZeroAccess();
+
+  /**
+   * @dev Constructor error when address(0) is sent as `currency()`
+   */
+  error NoZeroCurrency();
+
+  /**
+   * @dev Constructor error (or setTreasury) when address(0) is sent as `treasury()`
+   */
+  error NoZeroTreasury();
+
+  /**
+   * @dev Initialization error when empty name for the ERC721 is sent
+   */
+  error NoEmptyName();
+
+  /**
+   * @dev Initialization error when empty symbol for the ERC721 is sent
+   */
+  error NoEmptySymbol();
+
+  /**
+   * @dev Upgrade error when the new implementation contract tries to change the `access()`
+   */
+  error UpgradeCannotChangeAccess();
+
+  /**
+   * @dev Upgrade error when the new implementation contract tries to change the `currency()`
+   */
+  error UpgradeCannotChangeCurrency();
+
+  /**
+   * @dev Error when trying to add a component that was already added to the PolicyPool
+   */
+  error ComponentAlreadyInThePool();
+
+  /**
+   * @dev Error when trying to add a component that isn't linked to this pool (`.policyPool() != this`)
+   */
+  error ComponentNotLinkedToThisPool();
+
+  /**
+   * @dev Error when a component is not of the right kind, it might happen if a component declared as
+   *      ComponentKind.eToken doesn't support the IEToken interface (or similar) or when in a given operation
+   *      we expect a component to be a risk module and the stored kind is different.
+   */
+  error ComponentNotTheRightKind(IPolicyPoolComponent component, ComponentKind expectedKind);
+
+  /**
+   * @dev Error when a component is expected to be deprecated for the operation (see `removeComponent`) and it isn't.
+   */
+  error ComponentNotDeprecated();
+
+  /**
+   * @dev Error when trying to remove a component that is still in use. The "in use" definition can change from one
+   *      component to the other. For eToken in use means `totalSupply() != 0`. For PremiumsAccount means
+   *      `purePremiums() != 0`. For RiskModule means `activeExposure() != 0`.
+   */
+  error ComponentInUseCannotRemove(ComponentKind kind, uint256 amount);
+
+  /**
+   * @dev Error when a component is not found in the pool (status = 0 = inactive)
+   */
+  error ComponentNotFound();
+
+  /**
+   * @dev Error when a component is not found in the pool or is not active (status != active)
+   */
+  error ComponentNotFoundOrNotActive();
+
+  /**
+   * @dev Error when a component is not active or deprecated. Happens on some operations like eToken withdrawals or
+   *      policy resolutions that accept the component might be active or deprecated and isn't on any of those states.
+   */
+  error ComponentMustBeActiveOrDeprecated();
+
+  /**
+   * @dev Error when a method intented to be called by riskModule (and by policy's risk module) is called by someone
+   *      else.
+   */
+  error OnlyRiskModuleAllowed();
+
+  /**
+   * @dev Error raised when IPolicyHolder doesn't return the expected selector answer when notified of policy payout,
+   *      reception or replacement.
+   */
+  error InvalidNotificationResponse(bytes4 response);
+
   /**
    * @dev Event emitted when the treasury changes
    *
@@ -142,6 +237,13 @@ contract PolicyPool is IPolicyPool, PausableUpgradeable, UUPSUpgradeable, ERC721
    */
   event ComponentStatusChanged(IPolicyPoolComponent indexed component, ComponentKind kind, ComponentStatus newStatus);
 
+  /**
+   * @dev Event emitted when a IPolicyHolder reverts on the expiration notification. The operation doesn't reverts
+   *
+   * @param policyId The id of the policy being expired
+   * @param holder The address of the contract that owns the policy
+   */
+  event ExpirationNotificationFailed(uint256 indexed policyId, IPolicyHolder holder);
   /**
    * @dev Modifier that checks the caller has a given role
    */
@@ -167,8 +269,8 @@ contract PolicyPool is IPolicyPool, PausableUpgradeable, UUPSUpgradeable, ERC721
    */
   /// @custom:oz-upgrades-unsafe-allow constructor
   constructor(IAccessManager access_, IERC20Metadata currency_) {
-    require(address(access_) != address(0), "PolicyPool: access cannot be zero address");
-    require(address(currency_) != address(0), "PolicyPool: currency cannot be zero address");
+    if (address(access_) == address(0)) revert NoZeroAccess();
+    if (address(currency_) == address(0)) revert NoZeroCurrency();
     _disableInitializers();
     _access = access_;
     _currency = currency_;
@@ -182,8 +284,8 @@ contract PolicyPool is IPolicyPool, PausableUpgradeable, UUPSUpgradeable, ERC721
    * @param treasury_ The address of the treasury that will receive the protocol fees.
    */
   function initialize(string memory name_, string memory symbol_, address treasury_) public initializer {
-    require(bytes(name_).length > 0, "PolicyPool: name cannot be empty");
-    require(bytes(symbol_).length > 0, "PolicyPool: symbol cannot be empty");
+    if (bytes(name_).length == 0) revert NoEmptyName();
+    if (bytes(symbol_).length == 0) revert NoEmptySymbol();
     __UUPSUpgradeable_init();
     __ERC721_init(name_, symbol_);
     __Pausable_init();
@@ -204,8 +306,8 @@ contract PolicyPool is IPolicyPool, PausableUpgradeable, UUPSUpgradeable, ERC721
 
   function _authorizeUpgrade(address newImpl) internal view override onlyRole2(GUARDIAN_ROLE, LEVEL1_ROLE) {
     IPolicyPool newPool = IPolicyPool(newImpl);
-    require(newPool.access() == _access, "Can't upgrade changing the access manager");
-    require(newPool.currency() == _currency, "Can't upgrade changing the currency");
+    if (newPool.access() != _access) revert UpgradeCannotChangeAccess();
+    if (newPool.currency() != _currency) revert UpgradeCannotChangeCurrency();
   }
 
   /**
@@ -238,7 +340,7 @@ contract PolicyPool is IPolicyPool, PausableUpgradeable, UUPSUpgradeable, ERC721
   }
 
   function _setTreasury(address treasury_) internal {
-    require(treasury_ != address(0), "PolicyPool: treasury cannot be the zero address");
+    if (treasury_ == address(0)) revert NoZeroTreasury();
     _treasury = treasury_;
     emit ComponentChanged(IAccessManager.GovernanceActions.setTreasury, _treasury);
   }
@@ -280,15 +382,14 @@ contract PolicyPool is IPolicyPool, PausableUpgradeable, UUPSUpgradeable, ERC721
    */
   function addComponent(IPolicyPoolComponent component, ComponentKind kind) external onlyRole(LEVEL1_ROLE) {
     Component storage comp = _components[component];
-    require(comp.status == ComponentStatus.inactive, "Component already in the pool");
-    require(component.policyPool() == this, "Component not linked to this pool");
+    if (comp.status != ComponentStatus.inactive) revert ComponentAlreadyInThePool();
+    if (component.policyPool() != this) revert ComponentNotLinkedToThisPool();
 
-    require(
-      (kind == ComponentKind.eToken && component.supportsInterface(type(IEToken).interfaceId)) ||
-        (kind == ComponentKind.premiumsAccount && component.supportsInterface(type(IPremiumsAccount).interfaceId)) ||
-        (kind == ComponentKind.riskModule && component.supportsInterface(type(IRiskModule).interfaceId)),
-      "PolicyPool: Not the right kind"
-    );
+    if (
+      (kind == ComponentKind.eToken && !component.supportsInterface(type(IEToken).interfaceId)) ||
+      (kind == ComponentKind.premiumsAccount && !component.supportsInterface(type(IPremiumsAccount).interfaceId)) ||
+      (kind == ComponentKind.riskModule && !component.supportsInterface(type(IRiskModule).interfaceId))
+    ) revert ComponentNotTheRightKind(component, kind);
 
     comp.status = ComponentStatus.active;
     comp.kind = kind;
@@ -321,14 +422,16 @@ contract PolicyPool is IPolicyPool, PausableUpgradeable, UUPSUpgradeable, ERC721
    */
   function removeComponent(IPolicyPoolComponent component) external onlyRole(LEVEL1_ROLE) {
     Component storage comp = _components[component];
-    require(comp.status == ComponentStatus.deprecated, "Component not deprecated");
+    if (comp.status != ComponentStatus.deprecated) revert ComponentNotDeprecated();
     if (comp.kind == ComponentKind.eToken) {
-      require(IEToken(address(component)).totalSupply() == 0, "EToken has liquidity, can't be removed");
+      if (IEToken(address(component)).totalSupply() != 0)
+        revert ComponentInUseCannotRemove(comp.kind, IEToken(address(component)).totalSupply());
     } else if (comp.kind == ComponentKind.riskModule) {
-      require(IRiskModule(address(component)).activeExposure() == 0, "Can't remove a module with active policies");
+      if (IRiskModule(address(component)).activeExposure() != 0)
+        revert ComponentInUseCannotRemove(comp.kind, IRiskModule(address(component)).activeExposure());
     } else if (comp.kind == ComponentKind.premiumsAccount) {
       IPremiumsAccount pa = IPremiumsAccount(address(component));
-      require(pa.purePremiums() == 0, "Can't remove a PremiumsAccount with premiums");
+      if (pa.purePremiums() != 0) revert ComponentInUseCannotRemove(comp.kind, pa.purePremiums());
       IEToken etk = pa.juniorEtk();
       if (address(etk) != address(0)) {
         etk.removeBorrower(address(pa));
@@ -360,13 +463,13 @@ contract PolicyPool is IPolicyPool, PausableUpgradeable, UUPSUpgradeable, ERC721
     ComponentStatus newStatus
   ) external onlyRole2(GUARDIAN_ROLE, LEVEL1_ROLE) {
     Component storage comp = _components[component];
-    require(comp.status != ComponentStatus.inactive, "Component not found");
-    require(
-      (newStatus == ComponentStatus.active && _access.hasRole(LEVEL1_ROLE, _msgSender())) ||
-        (newStatus == ComponentStatus.suspended && _access.hasRole(GUARDIAN_ROLE, _msgSender())) ||
-        (newStatus == ComponentStatus.deprecated && _access.hasRole(LEVEL1_ROLE, _msgSender())),
-      "Only GUARDIAN can suspend / Only LEVEL1 can activate/deprecate"
-    );
+    if (comp.status == ComponentStatus.inactive) revert ComponentNotFound();
+    if (newStatus == ComponentStatus.active || newStatus == ComponentStatus.deprecated) {
+      _access.checkRole(LEVEL1_ROLE, _msgSender());
+    } else {
+      // ComponentStatus.suspended requires GUARDIAN_ROLE
+      _access.checkRole(GUARDIAN_ROLE, _msgSender());
+    }
     comp.status = newStatus;
     emit ComponentStatusChanged(component, comp.kind, newStatus);
   }
@@ -383,20 +486,18 @@ contract PolicyPool is IPolicyPool, PausableUpgradeable, UUPSUpgradeable, ERC721
 
   function _componentStatus(address component, ComponentKind kind) internal view returns (ComponentStatus) {
     Component storage comp = _components[IPolicyPoolComponent(component)];
-    require(comp.kind == kind, "Component is not of the right kind");
+    if (comp.kind != kind) revert ComponentNotTheRightKind(IPolicyPoolComponent(component), kind);
     return comp.status;
   }
 
   function _requireCompActive(address component, ComponentKind kind) internal view {
-    require(_componentStatus(component, kind) == ComponentStatus.active, "Component not found or not active");
+    if (_componentStatus(component, kind) != ComponentStatus.active) revert ComponentNotFoundOrNotActive();
   }
 
   function _requireCompActiveOrDeprecated(address component, ComponentKind kind) internal view {
     ComponentStatus status = _componentStatus(component, kind);
-    require(
-      status == ComponentStatus.active || status == ComponentStatus.deprecated,
-      "Component must be active or deprecated"
-    );
+    if (status != ComponentStatus.active && status != ComponentStatus.deprecated)
+      revert ComponentMustBeActiveOrDeprecated();
   }
 
   function deposit(IEToken eToken, uint256 amount) external override whenNotPaused {
@@ -419,7 +520,7 @@ contract PolicyPool is IPolicyPool, PausableUpgradeable, UUPSUpgradeable, ERC721
   ) external override whenNotPaused returns (uint256) {
     // Checks
     IRiskModule rm = policy.riskModule;
-    require(address(rm) == _msgSender(), "Only the RM can create new policies");
+    if (address(rm) != _msgSender()) revert OnlyRiskModuleAllowed();
     _requireCompActive(address(rm), ComponentKind.riskModule);
     IPremiumsAccount pa = rm.premiumsAccount();
     _requireCompActive(address(pa), ComponentKind.premiumsAccount);
@@ -459,7 +560,7 @@ contract PolicyPool is IPolicyPool, PausableUpgradeable, UUPSUpgradeable, ERC721
     // Checks
     _validatePolicy(oldPolicy);
     IRiskModule rm = oldPolicy.riskModule;
-    require(address(rm) == _msgSender(), "Only the RM can create new policies");
+    if (address(rm) != _msgSender()) revert OnlyRiskModuleAllowed();
     _requireCompActive(address(rm), ComponentKind.riskModule);
     IPremiumsAccount pa = rm.premiumsAccount();
     _requireCompActive(address(pa), ComponentKind.premiumsAccount);
@@ -509,6 +610,7 @@ contract PolicyPool is IPolicyPool, PausableUpgradeable, UUPSUpgradeable, ERC721
 
     emit NewPolicy(rm, newPolicy_);
     emit PolicyReplaced(rm, oldPolicy.id, newPolicy_.id);
+    _notifyReplacement(oldPolicy.id, newPolicy_.id);
     return newPolicy_.id;
   }
 
@@ -566,7 +668,7 @@ contract PolicyPool is IPolicyPool, PausableUpgradeable, UUPSUpgradeable, ERC721
     // Checks
     _validatePolicy(policy);
     IRiskModule rm = policy.riskModule;
-    require(expired || address(rm) == _msgSender(), "Only the RM can resolve policies");
+    if (!expired && address(rm) != _msgSender()) revert OnlyRiskModuleAllowed();
     require(payout == 0 || policy.expiration > block.timestamp, "Can't pay expired policy");
     _requireCompActiveOrDeprecated(address(rm), ComponentKind.riskModule);
 
@@ -606,7 +708,7 @@ contract PolicyPool is IPolicyPool, PausableUpgradeable, UUPSUpgradeable, ERC721
     if (!ERC165Checker.supportsInterface(customer, type(IPolicyHolder).interfaceId)) return;
 
     bytes4 retval = IPolicyHolder(customer).onPayoutReceived(_msgSender(), address(this), policyId, payout);
-    require(retval == IPolicyHolder.onPayoutReceived.selector, "PolicyPool: Invalid return value from IPolicyHolder");
+    if (retval != IPolicyHolder.onPayoutReceived.selector) revert InvalidNotificationResponse(retval);
   }
 
   /**
@@ -617,13 +719,29 @@ contract PolicyPool is IPolicyPool, PausableUpgradeable, UUPSUpgradeable, ERC721
     if (!AddressUpgradeable.isContract(customer)) return;
     if (!ERC165Checker.supportsInterface(customer, type(IPolicyHolder).interfaceId)) return;
 
-    try IPolicyHolder(customer).onPolicyExpired(_msgSender(), address(this), policyId) returns (bytes4) {
+    try IPolicyHolder(customer).onPolicyExpired{gas: HOLDER_GAS_LIMIT}(_msgSender(), address(this), policyId) returns (
+      bytes4
+    ) {
       return;
     } catch {
+      emit ExpirationNotificationFailed(policyId, IPolicyHolder(customer));
       return;
     }
   }
 
+  /**
+   * @dev Notifies the replacement with a callback if the policyholder is a contract. Never reverts.
+   */
+  function _notifyReplacement(uint256 oldPolicyId, uint256 newPolicyId) internal {
+    address customer = ownerOf(oldPolicyId);
+    if (!AddressUpgradeable.isContract(customer)) return;
+    if (!ERC165Checker.supportsInterface(customer, type(IPolicyHolderV2).interfaceId)) return;
+
+    bytes4 retval = IPolicyHolderV2(customer).onPolicyReplaced(_msgSender(), address(this), oldPolicyId, newPolicyId);
+    // PolicyHolder can revert and cancel the policy replacement
+    if (retval != IPolicyHolderV2.onPolicyReplaced.selector) revert InvalidNotificationResponse(retval);
+  }
+
   /**
    * @dev Base URI for computing {tokenURI}. If set, the resulting URI for each
    * token will be the concatenation of the `baseURI` and the `tokenId`. Empty

package/contracts/PolicyPoolComponent.sol

@@ -42,6 +42,9 @@ abstract contract PolicyPoolComponent is UUPSUpgradeable, PausableUpgradeable, I
   event GovernanceAction(IAccessManager.GovernanceActions indexed action, uint256 value);
   event ComponentChanged(IAccessManager.GovernanceActions indexed action, address value);
 
+  error NoZeroPolicyPool();
+  error UpgradeCannotChangePolicyPool();
+
   modifier onlyPolicyPool() {
     require(_msgSender() == address(_policyPool), "The caller must be the PolicyPool");
     _;
@@ -76,7 +79,7 @@ abstract contract PolicyPoolComponent is UUPSUpgradeable, PausableUpgradeable, I
 
   /// @custom:oz-upgrades-unsafe-allow constructor
   constructor(IPolicyPool policyPool_) {
-    require(address(policyPool_) != address(0), "PolicyPoolComponent: policyPool cannot be zero address");
+    if (address(policyPool_) == address(0)) revert NoZeroPolicyPool();
     _disableInitializers();
     _policyPool = policyPool_;
   }
@@ -94,7 +97,7 @@ abstract contract PolicyPoolComponent is UUPSUpgradeable, PausableUpgradeable, I
   }
 
   function _upgradeValidations(address newImpl) internal view virtual {
-    require(IPolicyPoolComponent(newImpl).policyPool() == _policyPool, "Can't upgrade changing the PolicyPool!");
+    if (IPolicyPoolComponent(newImpl).policyPool() != _policyPool) revert UpgradeCannotChangePolicyPool();
   }
 
   /**

package/contracts/RiskModule.sol

@@ -56,12 +56,16 @@ abstract contract RiskModule is IRiskModule, PolicyPoolComponent {
 
   address internal _wallet; // Address of the RiskModule provider
 
+  error NoZeroWallet();
+  error ExposureLimitCannotBeLessThanActiveExposure();
+  error PremiumsAccountMustBePartOfThePool();
+  error UpgradeCannotChangePremiumsAccount();
+
   /// @custom:oz-upgrades-unsafe-allow constructor
   constructor(IPolicyPool policyPool_, IPremiumsAccount premiumsAccount_) PolicyPoolComponent(policyPool_) {
-    require(
-      PolicyPoolComponent(address(premiumsAccount_)).policyPool() == policyPool_,
-      "The PremiumsAccount must be part of the Pool"
-    );
+    if (PolicyPoolComponent(address(premiumsAccount_)).policyPool() != policyPool_) {
+      revert PremiumsAccountMustBePartOfThePool();
+    }
     _premiumsAccount = premiumsAccount_;
   }
 
@@ -120,7 +124,9 @@ abstract contract RiskModule is IRiskModule, PolicyPoolComponent {
   function _upgradeValidations(address newImpl) internal view virtual override {
     super._upgradeValidations(newImpl);
     IRiskModule newRM = IRiskModule(newImpl);
-    require(newRM.premiumsAccount() == _premiumsAccount, "Can't upgrade changing the PremiumsAccount");
+    if (newRM.premiumsAccount() != _premiumsAccount) {
+      revert UpgradeCannotChangePremiumsAccount();
+    }
   }
 
   /**
@@ -133,8 +139,12 @@ abstract contract RiskModule is IRiskModule, PolicyPoolComponent {
   // runs validation on RiskModule parameters
   function _validateParameters() internal view virtual override {
     // _maxPayoutPerPolicy no limits
-    require(exposureLimit() >= _activeExposure, "Validation: exposureLimit can't be less than actual activeExposure");
-    require(_wallet != address(0), "Validation: Wallet can't be zero address");
+    if (exposureLimit() < _activeExposure) {
+      revert ExposureLimitCannotBeLessThanActiveExposure();
+    }
+    if (_wallet == address(0)) {
+      revert NoZeroWallet();
+    }
     _validatePackedParams(_params);
   }
 
@@ -259,7 +269,9 @@ abstract contract RiskModule is IRiskModule, PolicyPoolComponent {
   }
 
   function setWallet(address wallet_) external onlyComponentRole(RM_PROVIDER_ROLE) {
-    require(wallet_ != address(0), "RiskModule: wallet cannot be the zero address");
+    if (wallet_ == address(0)) {
+      revert NoZeroWallet();
+    }
     _wallet = wallet_;
     _parameterChanged(IAccessManager.GovernanceActions.setWallet, uint256(uint160(wallet_)), false);
   }
@@ -269,32 +281,17 @@ abstract contract RiskModule is IRiskModule, PolicyPoolComponent {
     uint256 lossProb,
     uint40 expiration
   ) public view virtual returns (uint256) {
-    return _getMinimumPremium(payout, lossProb, expiration, params());
+    return _getMinimumPremium(payout, lossProb, expiration, uint40(block.timestamp), params());
   }
 
   function _getMinimumPremium(
     uint256 payout,
     uint256 lossProb,
     uint40 expiration,
+    uint40 start,
     Params memory p
-  ) internal view returns (uint256) {
-    uint256 purePremium = payout.wadMul(lossProb.wadMul(p.moc));
-    uint256 jrScr = payout.wadMul(p.jrCollRatio);
-    if (jrScr > purePremium) {
-      jrScr -= purePremium;
-    } else {
-      jrScr = 0;
-    }
-    uint256 srScr = payout.wadMul(p.collRatio);
-    if (srScr > (purePremium + jrScr)) {
-      srScr -= purePremium + jrScr;
-    } else {
-      srScr = 0;
-    }
-    uint256 jrCoc = jrScr.wadMul((p.jrRoc * (expiration - block.timestamp)).wadDiv(SECONDS_IN_YEAR_WAD));
-    uint256 srCoc = srScr.wadMul((p.srRoc * (expiration - block.timestamp)).wadDiv(SECONDS_IN_YEAR_WAD));
-    uint256 ensuroCommission = purePremium.wadMul(p.ensuroPpFee) + (jrCoc + srCoc).wadMul(p.ensuroCocFee);
-    return purePremium + ensuroCommission + (jrCoc + srCoc);
+  ) internal pure returns (uint256) {
+    return Policy.getMinimumPremium(p, payout, lossProb, expiration, start).totalPremium;
   }
 
   /**
@@ -334,11 +331,11 @@ abstract contract RiskModule is IRiskModule, PolicyPoolComponent {
     uint96 internalId,
     Params memory params_
   ) internal returns (Policy.PolicyData memory policy) {
+    uint40 now_ = uint40(block.timestamp);
     if (premium == type(uint256).max) {
-      premium = _getMinimumPremium(payout, lossProb, expiration, params_);
+      premium = _getMinimumPremium(payout, lossProb, expiration, now_, params_);
     }
     require(premium < payout, "Premium must be less than payout");
-    uint40 now_ = uint40(block.timestamp);
     require(expiration > now_, "Expiration must be in the future");
     require(((expiration - now_) / 3600) < _params.maxDuration, "Policy exceeds max duration");
     require(onBehalfOf != address(0), "Customer can't be zero address");
@@ -381,7 +378,7 @@ abstract contract RiskModule is IRiskModule, PolicyPoolComponent {
     Params memory params_
   ) internal virtual returns (Policy.PolicyData memory policy) {
     if (premium == type(uint256).max) {
-      premium = _getMinimumPremium(payout, lossProb, expiration, params_);
+      premium = _getMinimumPremium(payout, lossProb, expiration, oldPolicy.start, params_);
     }
     require(premium < payout, "Premium must be less than payout");
     require(oldPolicy.expiration > uint40(block.timestamp), "Old policy is expired");