The Standard

Summary

The contract SmartVaultManagerV5 inherits the OwnableUpgradeable contract and uses the onlyOwner modifier, but the OwnableUpgradeable contract is not initialized, so the owner is always address(0) address

Vulnerability Details

For using OwnableUpgradeable contact, main contract should call __Ownable_init() function, which transfer ownership to msg.sender, but this is not done in the SmartVaultManagerV5 contract and there is not even an initialize function, so the owner address is zero.

Impact

Owner could not call any function with modifier onlyOwner

Tools Used

Manual review

Recommendations

Add function initialize() and call __Ownable_init() inside of it.