```\nfunction updateCommitment(\n    uint256 _commitmentId,\n    Commitment calldata _commitment\n) public commitmentLender(_commitmentId) { <- @audit-info checks that lender is msg.sender\n    require(\n        _commitment.principalTokenAddress ==\n            commitments[_commitmentId].principalTokenAddress,\n        "Principal token address cannot be updated."\n    );\n    require(\n        _commitment.marketId == commitments[_commitmentId].marketId,\n        "Market Id cannot be updated."\n    );\n\n    commitments[_commitmentId] = _commitment; <- @audit-issue never checks _commitment.lender\n\n    validateCommitment(commitments[_commitmentId]);\n```\n