Sparkn

CodeFox Inc.
DeFiFoundryProxy
15,000 USDC
View results
Submission Details
Severity: low
Valid

Storage Collision between Proxy in `Proxy.sol` and `distributor` Implementation

Vulnerability Details

When you implement proxies, logic and implementation share the same storage layout. In order to avoid storage conflicts EIP1967 was proposed.(https://eips.ethereum.org/EIPS/eip-1967) The idea is to set proxy variables at fixed positions (like impl and admin).

Impact

Storage collision because of lack of EIP1967 could cause conflicts and override some variables

contract Proxy {
// implementation address
address private immutable _implementation;

Tools Used

Manual Code Review

Recommendations

Consider using EIP1967 to avoid Storage Collision

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.