Description

The contract InfiniCardController contains an array-type state variable, custodianList. Additionally, the contract InfiniCardVault includes the function getCustodianList, which reads and returns this array. However, there is no implementation to set the custodianList array value.

Impact

While there is a mapping variable that records the whitelist of custodians, the associated array custodianList remains empty. This inconsistency can lead to confusion and misalignment between the actual whitelist and the data returned by getCustodianList.

Recommendations

Consider updating the array custodianList in functions addCusdianToWhiteList and removeCusdianToWhiteList.

Remediation

This issue has been acknowledged by Infini Labs, and a fix was implemented in commit 0f710ced↗.