The variable names protocol and liquidator in SmartVaultManagerV5 both store the same address, leading to potential confusion. Additionally, the variable name weth is used to represent the wrapped native token, which might be misleading.
The ambiguous variable names may cause confusion during development or future code reviews. It could lead individuals to believe that tokens are sent to the protocol team or that only WETH is used as the native wrapped token.
For the protocol variable, either set it to address(0) or the actual protocol multisig wallet. Modify all other contracts to use liquidator to avoid any confusion.
Rename the weth variable to wrappedNativeAddress without changing the type or order to avoid breaking upgrades. Refactor all other contracts accordingly.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.