BIR-22: Beanstalk Address in Depot

Proposer

Beanstalk Immunefi Committee

Summary

Reward 1,000 Beans to the whitehat that reported that the standalone Depot contract used the L1 Beanstalk contract address.

Links

• BIC Process
• Safe Transaction
• Arbiscan Transaction

Bug

Any transactions interacting with the Depot contract on Arbitrum would revert as a result of Depot using the incorrect Arbitrum Beanstalk contract address.

Previous Depot contract: https://arbiscan.io/address/0xDEb0f0dEEc1A29ab97ABf65E537452D1B00A619c

Fix

Deploy a new Depot contract with the correct Arbitrum Beanstalk contract address.

New Depot contract: https://arbiscan.io/address/0xdeb0f082ed3b0efe9257aea9f2e6e974aa4120c3

Determination

Given that no funds were ever at risk, the standalone Depot contract is not currently used anywhere and interacting with the contract would have simply reverted, the BIC has determined that this bug report be rewarded 1,000 Beans.

• Potential practicable economic damage: N/A
• Impact: Medium — Contract fails to deliver promised returns, but doesn't lose value
• Entitled to reward: Yes