Wrong comment in removeLiquidity

[code423n4]

Handle

cmichel

Vulnerability details

There's a misleading comment in UniswapHandler.removeLiquidity:

(amountMalt, amountReward) = router.removeLiquidity(
  address(malt),
  address(rewardToken),
  liquidityBalance,
  0,
  0,
  // @audit wrong comment
  msg.sender, // transfer broken LP tokens to sender
  now
);

A remove liquidity call on the router never "transfers broken LP tokens".
All LP tokens are always burned.
This msg.sender parameter is the recipient of the redeemed underlying pool pair tokens, malt and rewardToken.

[0xScotch]

I can see the wording here is confusing but the meaning is that the "LP tokens are broken into their constituent tokens (ie Malt and DAI) and transfered to the sender". The meaning isn't incorrect imo

[GalloDaSballo]

I think in this case non-critical works well.