Beanstalk: The Finale

Summary

Comments in the code suggest that there should be a PAUSER_ROLE which should pause all tokenTransfers when required but no such role is present

Vulnerability Details

The code comments in BeanstalkERC20 claim that the contract has a pauser role that can pause all token transfer but it does not have that role & transfers can't be paused.

Code snippet-
https://github.com/Cyfrin/2024-05-beanstalk-the-finale/blob/4e0ad0b964f74a1b4880114f4dd5b339bc69cd3e/protocol/contracts/tokens/ERC20/BeanstalkERC20.sol#L1-L67

Impact

No implementation of intended functionality

Tools Used

Manual review

Recommendations

if needed implement the pauser role