Empty function is just a waste
the internal _authorizeUpgrade() in ThunderLoan contract has no code. Also it is an internal function that does not get called from anywhere in any relevant contract. This leads me to believe it can be removed.
Low - might clutter up the code and waste some gas but no loss of funds to users or contract owner will occur.
Manual inspection
Remove this function
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.