Summary

The contract currently lacks a mechanism to update the pool address, which can become an issue if the original address is compromised or needs to be rotated.

Vulnerability Details

Without the ability to update the pool address, the contract could become permanently affected if the address is compromised or lost. This rigidity poses significant long-term risks.

Impact

• Severity: High

• Losing control over the pool address can render the contract inoperable or expose it to unauthorized actions, causing severe disruptions and potential security breaches.

Tools Used

• Manual code review

Recommendations

• Introduce a function to securely update the pool address, incorporating proper authorization checks.