Summary:

The KittyPool contract lacks a getter function for the i_euroPriceFeed address, making it inaccessible from outside the contract. This omission can hinder transparency and integration, particularly for external systems that require this information for interacting with the contract.

Vulnerability Detail:

In the KittyPool contract, the i_euroPriceFeed address is defined as a private immutable variable. However, unlike other similar variables (i_kittyCoin, i_aavePool, meowntainer), there is no public getter function to access this address. This restricts users and other contracts from retrieving the address, which could be essential for verifying the price feed used or for other integration purposes.

Code Snippet:

Impact:

• Transparency:

Users and developers cannot verify the i_euroPriceFeed address used in the contract, reducing the transparency of the system.

• Integration:

External systems and smart contracts that need to interact with the KittyPool contract may require the i_euroPriceFeed address. Without a getter function, these integrations are impeded.

Recommendations:

To address this issue, it is recommended to implement a public getter function for the i_euroPriceFeed address, similar to other addresses in the contract. This will enhance transparency and facilitate better integration with external systems.

Suggested Code Modification:

Add the following getter function to the KittyPool contract: