Summary

Protocol is not upgradeable

Vulnerability Details

The protocol can not be upgraded. This implies there is no remedy to the following

1. Policy, Market, Improvements, Experiences learning and changes e.g cant change collateral assets, can't add new functionality to the contracts, cant change thresholds

2. In the event of attack, bugs, problems in protocol the system cant be upgraded to correct challenge and ensure continuity

Impact

Medium: Not being upgradeable makes the system brittle and inflexible and unable to react to challenges, learnings, market conditions, new policies, attacks, inability to enhance functionality, competitiveness and more

Tools Used

Manual Analysis

Recommendations

It is recommended contracts be made upgradeable with MultiSig or Governance controlling the accesses, changes etc, so that an issues, new policies, changes can be adopted to ensure continuity of the project at the same address and states familiar to users