The variable names protocol
and liquidator
in SmartVaultManagerV5
both store the same address, leading to potential confusion. Additionally, the variable name weth
is used to represent the wrapped native token, which might be misleading.
The ambiguous variable names may cause confusion during development or future code reviews. It could lead individuals to believe that tokens are sent to the protocol team or that only WETH is used as the native wrapped token.
For the protocol
variable, either set it to address(0)
or the actual protocol multisig wallet. Modify all other contracts to use liquidator
to avoid any confusion.
Rename the weth
variable to wrappedNativeAddress
without changing the type or order to avoid breaking upgrades. Refactor all other contracts accordingly.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.