stake.link

stake.link
DeFiHardhatBridge
27,500 USDC
View results
Submission Details
Severity: high
Invalid

`SDLPoolPrimary.sol`::`initialize` is marked as public, which means that anyone can call it

Summary

SDLPoolPrimary.sol::initialize is marked as public, which means that anyone can call it. However, the function should be marked as internal or private to prevent external parties from reinitializing the contract.

Vulnerability Details

SDLPoolPrimary.sol::initialize is marked as public, which means that anyone can call it.

Impact

anyone can reinitialize the contract which is not intended for the contract.

Tools Used

Manual Review

Recommendations

use the OpenZeppelin library's initializable pattern instead

Updates

Lead Judging Commences

0kage Lead Judge over 1 year ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.