# #45813 \[SC-Insight] Missing \`setAutoClaiming\` Function

**Submitted on May 20th 2025 at 21:27:19 UTC by @Victor\_TheOracle for** [**Audit Comp | Flare | FAssets**](https://immunefi.com/audit-competition/audit-comp-flare-fassets)

* **Report ID:** #45813
* **Report Type:** Smart Contract
* **Report severity:** Insight
* **Target:** <https://github.com/flare-foundation/fassets/blob/main/contracts/assetManager/implementation/AgentVault.sol>
* **Impacts:**
  * Contract fails to deliver promised returns, but doesn't lose value

## Description

## Brief/Intro

The `AgentVault` documentation specifies a `setAutoClaiming` function that allows the vault owner to authorize specific executors and recipients to automatically claim delegation rewards and airdrops. However, this function is entirely absent from the contract implementation.

## Vulnerability Details

According to the official documentation, the `setAutoClaiming` function is designed to let the vault owner define which addresses are allowed to automatically claim both rewards and airdrops on their behalf.

However, in the current implementation of the `AgentVault` contract, **no such function is present**. The absence of `setAutoClaiming` results in the following issues:

* **Automated claiming cannot be configured**, despite the documentation implying otherwise.
* **Any systems or frontends that integrate with the contract expecting this feature will break**.

This omission represents a significant deviation from the specified functionality.

## Impact Details

The primary consequence of this missing function is **loss of automation** as vault owners cannot assign trusted claim executors despite this functionality being explicitly documented.

## References

* AgentVault Documentation for `setAutoClaiming`– <https://github.com/flare-foundation/fassets/blob/fc727ee70a6d36a3d8dec81892d76d01bb22e7f1/docs/IAgentVault.md?plain=1#L40-L41>
* AgentVault.sol (source): function not implemented - <https://github.com/flare-foundation/fassets/blob/main/contracts/assetManager/implementation/AgentVault.sol>

## Proof of Concept

1. `setAutoClaiming` is described as a function callable only by the vault owner to set executors and recipients for auto-claiming.

<https://github.com/flare-foundation/fassets/blob/fc727ee70a6d36a3d8dec81892d76d01bb22e7f1/docs/IAgentVault.md?plain=1#L40-L41>

```
**setAutoClaiming** - Set executors and recipients that can then automatically claim rewards and airdrop.
NOTE: only the owner of the agent vault may call this method.
```

2. The `AgentVault.sol` contract does not define `setAutoClaiming` anywhere in its implementation.
3. Callers attempting to use the function via ABI or frontend integration will get an error that tells them that the *function does not exist*.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://reports.immunefi.com/flare-fassets-or-mainnet-audit-comp/45813-sc-insight-missing-setautoclaiming-function.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
