Missing pause/unpause functionality
Summary
The contracts do not have any pause/ unpause functionality, in case of an attack or unforeseen situation pausing of functions won't be possible
Vulnerability Details
In the event of an attack pause/ unpause functionalities can be very helpful. The devs can quickly pause the core functions of the protocol like deposit/withdraw of tokens/funds and prevent further exploits, while they work on mitigating/fixing the issue.
Impact
In case of emergency the protocol can't be stopped from further exploit
Tools Used
Manual review
Recommendations
Use openzeppelin pausable library to implement emergency stop mechanism.
Lead Judging Commences
Informational / Gas
Please, do not suppose impacts, think about the real impact of the bug and check the CodeHawks documentation to confirm: https://docs.codehawks.com/hawks-auditors/how-to-determine-a-finding-validity A PoC always helps to understand the real impact possible.
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.