Missing Implementation of _emergencyWithdraw in strategies
Summary
The protocol does not implement _emergencyWithdraw function from BaseStrategy contract. In case of attack or something bad happens funds will be stucked.
Vulnerability Details
The strategies currently in scope lack an implementation of the _emergencyWithdraw function, which is critical for handling emergency situations. If an incident occurs, there is no mechanism to recover the funds securely.
Impact
Calling the shutdownWithdraw function from the BaseStrategy contract would invoke _emergencyWithdraw. However, without an implementation in the strategies, the call will fail to execute, leaving the funds inaccessible.
Tools Used
Manual Review
Recommendations
Implement the _emergencyWithdraw function.
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.