There is no `setter` function in `GmxProxy` contract to update `ExchangeRouter` address
Summary
The GMX ExchangeRouter address could change as stated in the GMX docs but this address is permanently fixed in the GmxProxy contract.
Vulnerability Details
The GMX docs says that If using contracts such as the ExchangeRouter, Oracle or Reader do note that their addresses will change as new logic is added
Impact
In the case of migration to new address, this vul will break the core functionality of the Gamma protocol.
Tools Used
Manual Review
Recommendations
Include an onlyOwner setter function to upgrade the ExchangeRouter address.
Lead Judging Commences
Informational or Gas
Please read the CodeHawks documentation to know which submissions are valid. If you disagree, provide a coded PoC and explain the real likelihood and the detailed impact on the mainnet without any supposition (if, it could, etc) to prove your point.
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.