# Aave RewardsController can add Usdc to the rewards list and the strategy has no way to collect the rewards Low/Info · Three Sigma · Institutional lending · 26th November, 2024 Finding 3S-Maple-N12 of the Maple Cash Strategies security review. - Protocol: https://maple.finance/ - Report: /reports/maple-finance-iv - Source: https://cdn.sanity.io/files/qoqld077/staging/a68d604be9eca467b1f656c2ca775e1cebc2a468.pdf --- ### Description The Aave strategy does not deal with the reward controller, so it could miss out on rewards emitted in case the fundsAsset is listed in the RewardsController. ### Recommendation Although the RewardsController does not currently emit rewards for Usdc, which is the asset that is going to be supported, consider adding the functionality to collect rewards. ### Status Addressed in [#e2a6251](https://github.com/maple-labs/maple-strategies/pull/39/commits/e2a6251f4d98a45ac04134dc03639d1bb67a69ee). --- Related findings: - [AaveV3 RewardsController provides rewards in any token, should be handled separately](https://0xsimao.com/findings/glacier-aave-rewards-provides-separately): Glacier - [`SortedLinkedList::getAllValues()` could add a paginated function to prevent DoS](https://0xsimao.com/findings/maple-finance-iii-sorted-linked-list-paginated): Maple Withdrawal Queue - [`rewardData.releaseRate` is incorrectly calculated on `RewardsController::config()` when `block.timestamp > start` and `rewardData.lastConfig != rewardData.start`](https://0xsimao.com/findings/exactly-protocol-update-staking-contract-reward-release-rewards-timestamp): Exactly Protocol Update - Staking Contract - [Rewards can disappear when new rewards are distributed in the RewardsController.](https://0xsimao.com/findings/exactly-protocol-update-staking-contract-rewards-disappear-distributed-controller): Exactly Protocol Update - Staking Contract