Submission Details
Severity:
Initializers can be front-run
Summary
Initializers could be front-run, allowing an attacker to either set their own values, take ownership of the contract, and in the best case force a re-deployment.
Vulnerability details
SDLPoolPrimary.sol ( #L30 ):
30: function initialize(
SDLPoolSecondary.sol ( #L66 ):
66: function initialize(
Tools Used
Manual Analysis
Prize pool breakdown
Total prize
27,500 USDC
nSLOC
1,41419
USDC / LOC
25,000 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.