Submission Details
Severity:
Ownable upgradeable does not pass input
Vulnerability Details
OwnableUpgradeable initialization requires passing address as argument at time of deployment which will be an address to be set as an owner of the contract.
Not passing any input will prevent calling of OwnableUpgradeable function and remain uninitialized.
/**
* @dev Initializes the contract setting the address provided by the deployer as the initial owner.
*/
function __Ownable_init(address initialOwner) internal onlyInitializing {
__Ownable_init_unchained(initialOwner);
}
Recommendations
The recommendation is made for passing deployer or any other address intended for ownership as required address in the input for initialization.
__Ownable_init(msg.sender);
Updates
Prize pool breakdown
Total prize
22,500 USDC
nSLOC
1,05421 USDC / LOC
20,000 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.