Alchemix Transmuter

Summary

The current implementation of StrategyMainnet StrategyArb StrategyOp lacks a function to withdraw WETH from the contract. Without a mechanism to directly withdraw WETH, and it could face challenges in recovering or reallocating unused WETH.

Vulnerability Details

The contract does not provide a method for withdrawing WETH held by contract.
This omission restricts the protocol's ability to reclaim WETH for operational or emergency purposes.

Any WETH transferred or accumulated in the contract cannot be retrieved without modifying the contract or deploying a separate contract to recover funds.

Impact

Locked Funds: WETH held in the contract cannot be utilized, potentially leading to capital inefficiency.

Tools Used

Recommendations

Add emergency withdrawing function to withdraw stucked WETH.