Description:
The Airstream controller is owned by the SpiritFactory, but the latter has no function to call the AirstreamController. Since the SpiritFactory is upgradeable, this can be mitigated.
The AirstreamController has 3 important functions that may be called, resumeAirstream(), pauseAirstream() and withdraw() (redirectRewards()` is optional).
The most important one is pauseAirstream(), since it stops the flow, preventing the controller from being liquidated and losing some of the funds.
Impact:
Airstream partially liquidated.
Recommended Mitigation:
Add the necessary functions to the SpiritFactory, pauseAirstream() being the most important.
0xSimao:
Fixed in PR #7.