# Consider using a time lock on critical permissioned functions. Low/Info · Three Sigma · Institutional lending · 10th April, 2024 Finding 3S-MAPLE-L05 of the Maple Finance security review. - Protocol: https://maple.finance/ - Report: /reports/maple-finance-iii-2024 - Source: https://cdn.sanity.io/files/qoqld077/production/36dbe5ca76da3d2392bcee581548067705b8bd36.pdf --- ### Description In critical functions that may affect the decision of users to stay invested in the protocol (for example functions that set certain pool terms, fees, upgrades, etc.), there are no timelocks implemented, which will give no time for users to take their funds from the protocol and thus can deter them from interacting with Maple. ### Recommendation Implement timelocks in the types of functions mentioned above. ### Status Acknowledged by the team. --- Related findings: - [All functions could have a `started` modifier as they should not be called before the start time](https://0xsimao.com/findings/codeup-started-modifier-called-time): CODEUP