Alchemix Transmuter

Summary

The setRouter function in the StrategyMainnet contract has a race condition where approval for the router is reset before setting a new router. This can lead to approval race conditions.

Vulnerability Details

When setting a new router, the approval for the previous router is reset to zero before setting the new router. This can lead to race conditions if transactions are executed in quick succession.

Impact

Approval Race Condition: Can lead to unexpected behavior and potential loss if approvals are not correctly updated. It can also lead to potential financial loss due to incorrect approvals.

Tools Used

Manual Review

Recommendations

Implement proper checks and balances to prevent race conditions.