Summary

Collaterals and their price feeds are being initialized at compilation time. There is no mechanism implemented that allows to update such addresses in case that any of them is deprecated or changed by Chainlink. Also, there is no way to add or remove collateral tokens.

Impact

In the case that a price feed is deprecated, the health checks will fail resulting in unexpected behaviours in the protocol and with the risk of being insolvent or undercollateralization.

Tools Used

Manual Review

Recommendations

Implement an update mechanism for s_priceFeeds