Submitted by WatchPug
https://github.com/code-423n4/2022-02-hubble/blob/ed1d885d5dbc2eae24e43c3ecbf291a0f5a52765/contracts/InsuranceFund.sol#L116-L119
The Governance address can call InsuranceFund.sol#syncDeps() to change the contract address of vusd anytime.
However, since the tx to set a new address for vusd can get in between users txs to deposit and withdraw, in some edge cases, it can result in users loss of funds.
As a result, Alice suffered a fund loss of 1,000,000 VUSD.
atvanguard (Hubble) acknowledged and commented:
moose-code (judge) decreased severity to Medium and commented:
