Submission Details
Severity:
Fees cannot be swapped for rewards.
Summary
The sellProfits function should convert a token to WETH and send it to the staking contract. However, there is currently no allowance to swap tokens through the router.
Vulnerability Details
After receiving the fees in other tokens, it is necessary to call sellProfits to convert the token to WETH and then send it to staking contract that is converted to staking rewards, but there is no allowance to router to enable to swap the tokens to WETH
Impact
Can't convert any fee to reward
Tools Used
Manual Review
Recommendations
Add an approve for router before call swapRouter.exactInputSingle() function.
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.