Summary

The system has an initial set of whitelisted tokens defined at deployment, but lacks the ability to update this list post-deployment.

Vulnerability Details

The constructor sets an initial list of whitelisted tokens. However, the protocol does not provide a function to add or remove tokens from this whitelist post-deployment. This renders the system inflexible to changes in token dynamics in the ecosystem.

Impact

System Rigidity: The inability to update the whitelist may restrict the system from adopting new tokens or responding to changes in token popularity.

Tools Used

Manual review

Recommendations

Implement a function allowing the owner or a designated authority to add or remove tokens from the whitelist post-deployment.