Part 2

Summary

In the function configureConnectedVaults, the line: connectedVaults[connectedVaults.length].add(vaultsIds[i]); will cause an "index out of bounds" error because connectedVaults.length gives the current length of the array and connectedVaults[connectedVaults.length] tries to access an index that does not exist

Vulnerability Details

connectedVaults is an array of EnumerableSet.UintSet. Solidity does not support dynamic array expansion via index assignment. When connectedVaults.length == n, trying to access connectedVaults[n] does not create a new element. Instead, it throws an out-of-bounds error.

Impact

• Directly accessing connectedVaults[connectedVaults.length] does not automatically expand the array.

• The function will fail every time unless connectedVaults.length has been explicitly increased.

Recommendation

Explicitly push a new UintSet instance before accessing an index.