SettToRenIbbtcZap.sol#setGuardian doesn't set the guardian, but governance

[code423n4]

Handle

0x0x0x

Vulnerability details

Proof of Concept

This function is intended to change the guardian, but the code changes the governance address as seen in the code:

    function setGuardian(address _guardian) external {
        _onlyGovernance();
        governance = _guardian;
    }

It should be replaced with the following code to have the functionality of setting guardian.

    function setGuardian(address _guardian) external {
        _onlyGovernance();
        guardian = _guardian;
    }

Tools Used

Manual analysis

[tabshaikh]

Fixed

[0xleastwood]

duplicate of #51