DeFiFoundrySolidity
16,653 OP
View results
Submission Details
Severity: medium
Invalid

Missing Fallback Mechanism for Paused Curve Pools

Summary

The system relies on a strict 1:1 peg between WETH and alETH to ensure accurate asset calculations . This peg is maintained through the claimAndSwap function which uses Curve pools to convert WETH to alETH at a premium. However, if the Curve pools are paused or unavailable, the function fails leaving the system without a fallback mechanism to restore the peg. This can disrupt arbitrage opportunities and asset balances culculation temporarily

Vulnerability Details

https://github.com/Cyfrin/2024-12-alchemix/blob/82798f4891e41959eef866bd1d4cb44fc1e26439/src/StrategyMainnet.sol#L101

The function assumes that the Curve pool specified by pools[_routeNumber] is always operational. If the pool is paused, the router.exchange call will revert halting the entire transaction.

Impact

When the Curve pool is unavailable, there is no alternative method to complete the swap or maintain the 1:1 peg between WETH and alETH. This can disrupt asset calculations and arbitrage mechanisms.

Tools Used

Manual Review

Recommendations

Provide an alternative method to handle the swap if the Curve pool is unavailable.

Updates

Appeal created

inallhonesty Lead Judge 5 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.