StrategyMainnet is missing setRouter function
Summary
StrategyMainnet is missing setRouter function.
Vulnerability Details
router is used to swap tokens when necessary in the flow of the contract. StrategyOp and StrategyArb do have a setRouter function to update the address of the router in case the current one is compromised or for any other reason. However, the StrategyMainnet contract does not implement such a function. This is even more an issue since the contract uses CurveRouter, which is not an upgradeable contract
Impact
This can lead to unexpected behavior and the inconsitency of the contract.
Tools Used
Manual review.
Recommendations
Add a setRouter function to StrategyMainnet to update router as done in the StrategyOp and StrategyArb contracts.
Appeal created
Cannot Set A New Router In `StrategyMainnet.sol`
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.