Sparkn

Summary

The contract lacks a mechanism to update, add, or remove tokens from the whitelistedTokens list, posing a risk if a token becomes compromised or a new one needs to be added.

Vulnerability Details

The whitelistedTokens mapping is set in the constructor and cannot be modified afterward. There are no functions to update this list.

Impact

1- Inability to remove compromised or untrustworthy tokens.
2- Cannot add new, trustworthy tokens to the list.

Tools Used

Manual

Recommendations

Implement functions to add and remove tokens in the whitelistedTokens list, accessible only by the contract owner.