AuraSpell#closePositionFarm requires users to swap all reward tokens through same router
Summary
AuraSpell#closePositionFarm requires users to swap all reward tokens through same router. This is problematic as it is very unlikely that a UniswapV2 router will have good liquidity sources for all tokens and will result in users experiencing forced losses to their reward token.
0x52
medium
AuraSpell#closePositionFarm requires users to swap all reward tokens through same router
Summary
AuraSpell#closePositionFarm requires users to swap all reward tokens through same router. This is problematic as it is very unlikely that a UniswapV2 router will have good liquidity sources for all tokens and will result in users experiencing forced losses to their reward token.
Vulnerability Detail
AuraSpell.sol#L193-L203
All tokens are forcibly swapped through a single router.
Impact
Users will be forced to swap through a router even if it doesn't have good liquidity for all tokens
Code Snippet
AuraSpell.sol#L149-L224
Tool used
Manual Review
Recommendation
Allow users to use an aggregator like paraswap or multiple routers instead of only one single UniswapV2 router.