Summary

Lack of _disableInitializers call to prevent uninitialized contracts

Vulnerability Details

Multiple contracts are using the Initializable module from OpenZeppelin. For this reason and in order to prevent leaving that contract uninitialized OpenZeppelin's documentation recommends adding the _disableInitializers function in the constructor to automatically lock the contracts when they are deployed. this will protect the contract that holds the logic business from beeing initialized by an attack.

Github: [46]

Impact

See Vulnerability Details

Tools Used

Manual Review

Recommendations

Consider adding _disableInitializers in constructor