The issue was that the deposit for rETH via Uniswap didn't include a deadline.
Mitigation review
Uniswap is no longer used. Instead RocketSwapRouter is used which swaps what cannot be deposited in the pool on either Uniswap or Balancer, according to provided weights. A 100% Balancer weight has been chosen, which sets the deadline to block.timestamp. (RocketSwapRouter sets the same deadline for Uniswap.)
Mitigated issue
M-04: Lack of deadline for uniswap AMM
The issue was that the deposit for rETH via Uniswap didn't include a deadline.
Mitigation review
Uniswap is no longer used. Instead RocketSwapRouter is used which swaps what cannot be deposited in the pool on either Uniswap or Balancer, according to provided weights. A 100% Balancer weight has been chosen, which sets the deadline to
block.timestamp
. (RocketSwapRouter sets the same deadline for Uniswap.)