Submitted by 0x1f8b
Centralized risks allows rogue pool behavior.
The onlyPair modifier is as detailed below:
And the bathHouse is the admin as you can see in the following comment in the initialize method
So if the admin its able to be the a valid pair (it could change the owner with setBathHouse), the owner its able to call the method rebalance and steal any token.
Affected source code:
bghughes (Rubicon) acknowledged and commented:
HickupHH3 (judge) commented:
