The Standard

Summary

SmartVaultManagerV5 misses setters for some of its variables. This means that variables would be always equal to their default values.

Vulnerability Details

The list of uninitialized variables in the SmartVaultManagerV5 contract:

• collateralRate

• tokenManager

• smartVaultIndex

• euros

• swapRouter

These uninitialized variables cause critical issues in the SmartVaultManagerV5 contract, rendering some of its functions unusable, e.g. SmartVaultManagerV5.mint() will always throw because euros address is still equal to the default value (address(0)). Similarly, collateralRate being unable to initialize results in a perpetual default value (0), causing a DoS in some functions like maxMintable() due to division by zero:

Impact

The SmartVaultManagerV5 contract contains multiple uninitialized variables, rendering the contract unusable after deployment.

Tools Used

Manual review

Recommendations

Implement setters for the specified variables to resolve the issue.