LendeXe Finance security record

In the contract **SwapHelper**, the role **admin** has authority over the following functions: - function _setSwapRouter(), to set swap router. - function _setStabilizer(), to set the stabilizer. Any compromise to the **admin** account may allow a hacker to take advantage of this authority. In the contract **XSDStabilizer**, the role **liquidityOracle** has authority over the following functions: - function setLiquidity(), to set the packed liquidity. Any compromise to the **liquidityOracle** account may allow a hacker to take advantage of this authority. In the contract **XSDStabilizer**, the role **admin** has authority over the following functions: - function _setLiquidityOracle(), to set the liquidity oracle address. - function _setComptroller(), to set the comptroller address. - function _setSwapHelper(), to set the swap helper address. Any compromise to the **admin** account may allow a hacker to take advantage of this authority.

In the contract `Comptroller`, the role `admin` has authority over the following functions: - function _setPriceOracle(), to set a new price oracle for the comptroller. - function _setCloseFactor(), to set the `closeFactor` used when liquidating borrows. - function _setCollateralFactor(), to set the `collateralFactor` for a market - function _setLiquidationIncentive(), to set the `liquidationIncentive`. - function _supportMarket(), to add and initialize the market to the markets mapping and set it as listed. - function _setMarketBorrowCaps(), to the given borrow caps for the given `xToken` markets. Borrowing that brings total borrows to or above the borrowing cap will revert. - function _setBorrowCapGuardian(), to change the Borrow Cap Guardian. - function _setPauseGuardian(), to change the address of the Pause Guardian. - function _setMintPaused(), to pause or unpause the mint. - function _setBorrowPaused(), to pause or unpause the borrow. - function _setTransferPaused(), to pause or unpause the transfer. - function _setSeizePaused(), to pause or unpause the seize. - function _setSwapHelperAddress(), to set the address for the contract `SwapHelperAddress`. Any compromise to the `admin` account may allow a hacker to take advantage of this authority.

In the contract `UltimateLoan`, the role `admin` has authority over the following functions: - function setSupplyTokens(), set supply tokens, users supply these tokens to the market and receive XDS in exchange. - function setStatus(), to pause or unpause the Ultimate Loan. - function setDueDate(), to set the due date. - function setULLock(), to set the address of the contract `UltimateLoanLock`. - function setULPercentage(), to set the exchange rate of the contract `UltimateLoanLock`. Any compromise to the `admin` account may allow a hacker to take advantage of this authority. In the contract `XSD`, the role `admin` has authority over the following functions: - function _setStabilizer(), to set the address of the `XSDStabilizer` contract. - function _delegateAdmin(), to delegate admin address to a different one. Any compromise to the `admin` account may allow a hacker to take advantage of this authority. In the contract `XSD`, the role `Stabilizer` has authority over the following functions: - function mint(), to mint any amount of `XSD` tokens to any `account` address. - function burn(), to destroy any amount of `XSD` tokens for the `account` address. Any compromise to the `Stabilizer` account may allow a hacker to take advantage of this authority. In the contract `XSDStabilizer`, the role `admin` has authority over the following functions: - function _unbanToken(), to unban a previously banned token. - function _setUltimateLoanAddress(), to update the address of the `UltimateLoan` contract. Any compromise to the `admin` account may allow a hacker to take advantage of this authority. In the contract `XSDStabilizer`, the role `ultimateLoanAddress` has authority over the following functions: - function burnDirectly(), to burn XSD directly without handing out stablecoins. Any compromise to the `ultimateLoanAddress` account may allow a hacker to take advantage of this authority. In the contract `UltimateLoanLock`, the role `ultimateLoan` has authority over the following functions: - function unlockUser(), to unlock `xLEXE` tokens and transfer to the user and `ultimateLoan` address. Any compromise to the `ultimateLoan` account may allow a hacker to take advantage of this authority.