The processAccounting function will revert on every invocation within the ynBNBx context
Vulnerability Details
The Provider contract, responsible for retrieving rates for all assets held by the vault, currently does not include the ynClisBNBk strategy. As a result, when the processAccounting function attempts to update the totalAssets variable, it fails and reverts with each call.
if (asset == MC.BUFFER || asset == MC.YNBNBk) {
return IERC4626(asset).previewRedeem(1e18);
}Impact
MEDIUM – The processAccounting function will revert on every invocation within the ynBNBx context.
Recommendation
Incorporate the ynClisBNBk strategy into the list of assets supported by the Provider contract on the BNB Chain.
References
Meet Composable Security
Get throughly tested by the creators of Smart Contract Security Verification Standard
