The `SmartVaultManagerV5.sol` contract is not initialized in the `initialize()` function
Impact
Upgradeable contracts are set up using the initialize() function.
SmartVaultManagerV5.sol being such a contract, it should be set up in this function.
Currently, the initialization is handled by the hardhat upgrades functionnality which takes care of everyting.
Throughout the evolution of the project, the framework used may switch from hardhat to another one (e.g. foundry) which doesn't have such a functionnality.
As a result, this contract might never get initialized (or worse, initialized by a malicious user) which could lead to unexpected behaviors.
Tools used
Manual analysis
Recommended mitigation steps
Set up all the storage variables and permissions in the initialize() function
Lead Judging Commences
informational/invalid
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.