In the Diamond.sol constructor, there is no check which prevents other users from been an admin. This can be seen as redundant and also increase gas cost; however, this reduces the possibility of a non-admin claiming access through malicious means. This can be also possibly be fixed by calling the enforceIsContractOwner() from the LibDiamond.sol library in the constructor.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.