Beanstalk Part 2

Summary

As we know this protocol is using stETH too in different places. Even it is whitelisted in the well. So any issue related stETH would be very critical.

Vulnerability Details

stETH transfers can be paused, as I checked in the stETH contract implementation provided. When stETH transfers are paused, any attempt to transfer stETH tokens will result in the transaction reverting. This behavior poses a significant risk, particularly for contracts that depend on the availability of stETH tokens for various operations, such as price calculations or token swaps.

Impact

The impact of paused stETH transfers can be substantial. For instance, user wants to swap stETH tokens or deposit these tokens to the protocol they wouldn't be able to perform that. It will ultimately result in loss of funds and even DOS as nothing related to stETH tokens can be done.

Tools Used

Manual Review

Recommendations

To address this issue, it's recommended to enhance the contract's robustness by incorporating a check to ensure that stETH transfers are not paused before executing any operations involving stETH tokens.