SmartVaultManagerV5 - state variables in the contract are not initialized in the initialised in initialize function
Summary
A number of state variables in SmartVaultManagerV5 are not initialized and could be vulnerable to invalid state. This invalid state could impact the behaviour and functioning of the smart contract.
Vulnerability Details
As the sequence of function called on a smart contract are not controllable, it is important that the state variables are setup on deployment or on initialisation. But, this approach was not followed for SmartVaultManagerV5 contract.
The concern arises as the initialize function is left blank with out initialising the state variables.
Impact
Unexpected behaviour for the smart contract.
Tools Used
Manual review
Recommendations
Implement the initialize function to assign default values for each of the state variables. The set functions could override the state variables with different values.
Lead Judging Commences
informational/invalid
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.