Submitted by defsec
On the protocol, almost all functionality is constructed through WETH address. However, if the admin is set to WETH address mistakenly, user could not claim through Comptroller.sol#L1381. Admin can break the protocol.
https://github.com/Plex-Engineer/lending-market-v2/blob/main/contracts/Comptroller.sol#L1479
Set WETH address through initializer or change it through governance.
nivasan1 (Canto) disputed and commented:
Alex the Entreprenerd (judge) commented:
