# Hardcoded divider address in RollerUtils is incorrect and will brick autoroller

RollerUtils hardcoded the Goerli Divider address instead of mainnet, so Divider.series() reverts and AutoRoller cooldown bricks, trapping LPs on combineRestricted adapters.

- Payout: Contest reward
- Severity: medium
- Program: Sense
- Credited: 0x52
- Disclosed: 2022-10-31
- Write-up quality: 6/10
- Original: https://github.com/sherlock-audit/2022-11-sense-judging/issues/19
- Library page: https://bugbountylibrary.com/r/sherlock%3A2022-11-sense%3AM-4
- Tags: domain:web3 impact:dos impact:funds-loss kind:contest platform:sherlock sev:medium tech:evm tech:solidity technique:source-review vuln:dos vuln:misconfiguration

**Target:** AutoRoller/RollerUtils smart contract
**Root cause:** RollerUtils stores DIVIDER as a hardcoded constant set to the Goerli divider address rather than the correct mainnet address (and not passed via constructor/immutable).
**Steps:**
1. Deploy/use AutoRoller on mainnet with RollerUtils containing `DIVIDER = 0x09B10E45A912BcD4E80a8A3119f0cfCcad1e1f12` (Goerli address)
2. Call `AutoRoller#cooldown`, which invokes `RollerUtils#getNewTargetedRate`
3. `DividerLike(DIVIDER).series(adapter, prevMaturity)` reverts because no contract exists at that address on mainnet
4. AutoRoller cycle cannot complete; LPs must withdraw or eject
5. For combineRestricted adapters, eject's PT+YT combine also fails, leaving no withdrawal path
**How found:** Code reading of RollerUtils revealed a hardcoded DIVIDER constant; the researcher recognized the address did not match the mainnet Divider deployment (it was the Goerli address used during testing).
**Escalation:** Impact raised from DoS of the autoroller cycle to permanent fund lock for LPs when the adapter is combineRestricted, since eject cannot combine PT and YT.
**Insight:** When auditing contracts with hardcoded external addresses, verify each constant against the actual deployment network's address book; testnet addresses left in production code silently revert every dependent call path.