Submission Details
Severity:
`Distribution:depositToken` cannot be updated leading to unexpected behavior
Description
The depositToken is supposed to be stETH which is an upgradeable contract, but the state variable depositToken in Distribution.sol cannot be updated even if the stETH is upgraded to a new implementation. This can lead to unexpected behavior.
Recommendation
Consider adding a setDepositToken function to Distribution.sol to update the depositToken state variable.
+ function setDepositToken(address _depositToken) external onlyOwner {
+ depositToken = _depositToken;
+ }
Prize pool breakdown
Total prize
22,500 USDC
nSLOC
1,05421
USDC / LOC
20,000 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.