Submission Details
Severity:
Unable to upgrade the implementation `Distributor.sol` to a new version
Summary
Vulnerability Details
SPARKN protocol consists of both web2 and Web3, and the system can be upgraded in the future. Because the structure of the contracts are simple and straightforward, and at the same time, all contests have their own life cycle, it is easy to upgrade the system in the future. Once a contest's life cycle ends, we can decide to introduce new contests with any necessary upgrades from that point on.
According to the official implementation, the system should be upgradeable.
But after deploying the Proxy and Distributor contracts, there is no function in the Proxy contact to upgrade the implementation to a new version, which is different from the documentation description.
Impact
Unable to upgrade all contests to the new version implementation.
Tools Used
Manual review
Recommendations
It is recommended to implement new function upgradeTo in Proxy contract, which can modifiy the state variable _implementation to new version address.
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
19477
USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.