`SwapRouter` hardcoded address is incorrect for Base chain
Summary
The Fees contract contains a hardcoded address of SwapRouter. This address is incorrect for some chains, including the Base chain.
Vulnerability Details
Although it is not mentioned explicitly in the docs that the Beedle protocol is supposed to work cross-chain, their first DeFi product (Swap) was deployed to Base.
Sources:
https://twitter.com/beedlefi/status/1687076550493999104
https://swap.beedle.fi/exchange/swap
The hardcoded address of the Uniswap SwapRouter is incorrect for the Base chain. The sellProfits function of Fees contract will not work on this chain.
Impact
The sellProfits function of Fees contract will not work on specific chains.
Tools Used
Manual Review
Recommendations
Use dynamic SwapRouter address passed into the Fees constructor instead of a hardcoded value. Please refer to the Uniswap documentation for the correct addresses on specific chains:
https://docs.uniswap.org/contracts/v3/reference/deployments
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.